updated readme.me

to reflect on the security of the bundled plugin manager controller
closes #7