Add caveat about keyring package