Updated docs, including explicit security limitations

Fixes #387.