Add note about secrets to README