(readme: added todo about external validators)