updated README.
removed *insecure* text
only print when ATTACK set