Reflect SECRET_TOKEN vulnerability in README #296