readme: document new environment variable ALLOW_UNSAFE