README: Clarify handling of passwords/credentials

Fixes #51.
Merge pull request #52 from certik/patch-1

README: Clarify handling of passwords/credentials