Improve ModSecurity integration documentation

Just a suggestion to add to the docs of this integration.
This integration requires to configure the ModSecurity log format as follow
```
SecAuditLogParts ABDEFHIJZ
SecAuditLogType Serial
SecAuditLog /var/log/modsec_audit.json
SecAuditLogFormat JSO
```
For example, most web application programmers are taught to always use POST methods for the transactions that contain sensitive data and using the I part (Compact request body alternative (to part C), which excludes files) will log that sensitive information.

IMHO a short note can be added to the doc suggesting removing (obfuscate) sensitive data from audit logs using the sanitation actions `sanitiseArg`, `sanitiseRequestHeader` and `sanitiseResponseHeader`, and `sanitiseMatched.`