Add note about sensitive information.

I'm updating my 'development' config files to use these conventions and filenames, will commit changes after testing.