Add a security note to deploycfg

conf/deploycfg.py

@@ -5,6 +5,11 @@
 # This is an example. It may serve as a reasonable start, but do not just
 # blindly copy it to your production environment and expect it to work.
 
+# IMPORTANT: Change permissions to this file prior to copying to the
+# configuration directory! (Depending on the trustworthiness of your system, it
+# might be sufficient to change the permissions prior to entering secret
+# values, but it might not…)
+
 DEBUG = False
 SECRET_KEY = ...
 ALLOWED_HOSTS = [...]