Add a note on security