add disclaimer about jruby security