README.md: specify DescribeSecurityGroups in policy