readme minutia: https over git, clarity in warning