explain that verifast tracks malloc/free calls
add note