update README

This should mostly fix issue #160; the one main thing that's omitted
is point 4, because that's not possible to address without mentioning
the private repository.

I am slightly nervous too about introducing a --force-yes option - there's
a reason that unsigned repositories are considered dubious.