Add note about enhanced security for using HTTP CA API endpoints