[readme] mention the compromised ssl action plan