readme: improve setup instructions

Refer to protected_record_engine