Update README security notes