Add note to docs on allowScriptAccess opt