added note about pfx security