Elaborate on OSSEC alert instructions

Addresses #788 
Need to make edits to install.md to account for new document
Majority appears to be saying we should recommend 2fa. I'm fine with that now that we know it works.