Added note about self-signed webstart app security