don't let people find secure tags, give an error instead
Merge pull request #234 from jlipps/master

better error messages for unsupported tag names