Add note in README about using inSecure: false