Add a note about security to the readme