Unfortunately, the options are very constrained if you require both features and security. The only platform I know of with a strong security history and a decent feature-set is Apache Roller: http://roller.apache.org/