Expand on expectations for cache name mismatch

If we don't tell users otherwise, they'd assume that a cache name
mismatch is simply a software error.  Instead it is a critical
security signal.  We can't gloss over that.