Documented Spring method security caveat [ci skip]

...Also rephrased paragraph explaining handling of non-instrumented Spring Wev MVC controller methods.