Add security note for hook scripts from within the repository