README section on security