[security] adding a tip about supported algorithm for 'hash' function