readme is now MarkDown; added security