README.md: add security note and more detailed installation instructions