Update README.md

Move security section up, since we're dealing with privkeys, update statements about the features.