fixes #177 added a note that it is the user's reponsibiility to secure credentials

Author: mediumTaj

README.md

@@ -43,8 +43,8 @@ Move the **`unity-sdk`** directory into the Assets directory of the Unity projec
 
 ## Configuring your service credentials
 You will need the 'username' and 'password' credentials for each service. Service credentials are different from your Bluemix account username and password.
-1. Determine which services to configure.
 
+1. Determine which services to configure.
 2. If you have configured the services already, complete the following steps. Otherwise, go to step 3.
     1. Log in to Bluemix at https://bluemix.net.
     2. Navigate to the **Dashboard** on your Bluemix account.
@@ -65,6 +65,8 @@ You will need the 'username' and 'password' credentials for each service. Servic
     ![services-1](http://g.recordit.co/zyL5RZYXqa.gif)
 4. Click **Save**, and close the Config Editor.
 
+Note: The Config.json file is saved as plain text in the StreamingAssets directory. It is the user's responsibility to secure the credentials.
+
 ## IBM Watson Services
 ### Speech to Text
 Use the [Speech to Text][speech_to_text] service to recognize the text from a .wav file. Assign the .wav file to the script in the Unity Editor. Speech to text can also be used to convert an audio stream into text. When using the Microphone Widget and publishing to iOS, the XCode project plist must be updated with a `NSMicrophoneUsageDescription` or the application will crash silently.