diff --git a/README.md b/README.md
index 595efde..8e08fed 100644
--- a/README.md
+++ b/README.md
@@ -32,4 +32,6 @@ nim: to compile binary. We used nim 2.2.4 at the time of writing this.
 
 -- locally, we installed tailwindcss cli in the `dev` folder and run `./tailwindcss -i fmn.css -o ../assets/css/fmn.css -w -m` from there to create the production css file in assets/css. You can do the same, if you wanted to tweak anything.  
 
--- In some cases, you may have to manually edit nimword and/or nim-libsodium to add the libsodium.so version your distro has installed. If you have libsodium installed, and Forget-Me-Not still won't run, run it in the foreground to get the error message, and take a look at that.
\ No newline at end of file
+-- In some cases, you may have to manually edit nimword and/or nim-libsodium to add the libsodium.so version your distro has installed. If you have libsodium installed, and Forget-Me-Not still won't run, run it in the foreground to get the error message, and take a look at that.
+
+-- You may want to add an extra layer of protection for your whole instance if running on the WAN, by using http basic auth, and/or deny outside access to your `send-reminders` POST route in a nginx location directive or at least throttle for that route so adversaries can't guess your key.
\ No newline at end of file