Adding note about the config insecurity