Add security notice to installation doc