Make sure the security implication of subsites is clear in docs.
Merge pull request #133 from mateusz/docs-security

Make sure the security implication of subsites is clear in docs.