Add security notes to README