update README with additional warnings (after seeing an arch linux package in the wild)
replace OpenBSD's explicit_bzero with NetBSD's

It may be a little cargo cultish (this code is already built into its
own separate library with -O0), but compilers become more clever all the
time.