README.md: add length/tag validation limitation