Suggest config file location change outside web root

Closes #4: CVE-2014-3928: Unsafe configuration file path/ACL
Merge branch 'CVE-2014-3928'
Suggest config file location change outside web root

Closes #5: CVE-2014-3929: Unsafe SSH keypairs path in default config
Merge branch 'CVE-2014-3929'