You’re right. The assumption right now is that you’re running on trusted devices on your own local network. I will add a section in the README.