include note about password security in security doc