Update README.md

Added some additional recommendations around the security of the .env file and the private key used in the bot.

Author: cryptopavelsan

README.md

@@ -16,8 +16,13 @@ yarn install
 ## Configure
 1. Create an `.env` file at the project root. See `.env-example`. 
 Private key can be obtained from Phantom via Settings -> Export Private Key.
+
+As the private key is stored in the .env file it is important to secure access to this file (on top of severly limiting funds stored on this wallet). Remove other/group access as a starting point to this file to only allow the owner and root user to be able to read the file (chmod 600 .env), use a secure password for the user for accessing the server it runs on and follow other best practices to reduce risk here including frequently moving swapped dca tokens to a hardware backed wallet.
+
 2. Create your own `dcaconfig.ts`. See `dcaconfig-example.ts` for a template. 
 
+Remove the entires you do not need from the sample file. Always start with a very small amount to see it is doing what is expected before you test further. Use at your own risk.
+
 To see example cron expressions, check out [crontab.guru](https://crontab.guru/).
 Note: the minimum interval is one minute.
 ## Run