README: add bit about exposing the service to public internet