added more explicit instructions and added in more comments to comment out some lines in security.yml.