Update README
Add warning notice if checking a risky capability for an unprivileged user

Since this has_capability() will override the normal checks and always prevent access
in such cases, we add a warning to indicate the normal calculations don't apply
Remove TODO file