Update installing.rst

Mostly prompted by #1079, but also addresses a few concerns about promoting good security practices as discussed on distutils-sig over the past few months :)