write some more security configurations in the INSTALL note