adds security note

I can't believe this wasn't in here already!!