Clearly note the security hole

When remote-transit-gateway is run as it stands, it is an
enormous security hole.  This is a proof of concept server only, and
is not meant to be reachable by anybody who isn't trusted.