Add details on the security in the README

[Dan Giles]

Based on discussions today, we may need to be explicit on the README about the security set up.