Fix instructions in README
Support setting grsecurity flags via paxctl