Clarify how escaping works for encrypting env vars

Fixes #389
Merge pull request #418 from travis-ci/hh-clarify-escaping-for-secure-env-vars

Clarify how escaping works for encrypting env vars