Update README.md

Adding documentation for how to restrict access globally via submodule