Clarified that pull requests from forks cannot use encrypted env variables