update readme with security steps - bullets