Add security notice re 0.2.5