added security hint to readme