Can Large Language Models Identify And Reason About Security Vulnerabilities? Not Yet