Add security tip to readme