Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
Ok, but I don't think App passwords are all that problematic - as they last forever until they are manually revoked. That would be the risk, that they revoke it by accident, which is on par with resetting the password. But I will edit to recommend against 2-step.