Added notes about config for image_allow_insecure_derivatives.