Update README.md

Add instruction to make config file readable/writeable by only the developer.