Add harvest credentials warning to readme.