add note to README for scoped key generation re: security defaults in JDK 7