README: security + rsync