Update readme with security note