add security section to rizzo docs

security section for rizzo docs
@Ianfeather @stevebrownlee not quite sure what the recommendation should be on this one. 
A rails proxy that gets credentials from .env?