Mention Boot's default secure settings

Resolves #11 by mentioning Boot's default security settings and also linking to ref docs.