Create Security Risk Documentation

Now that we support roll your own server and credentials we have risks of users utilizing these features without fully understanding the implications. It would be a nice to have if we wrote up or at least pointed to some security documentation **within the experience**.

The issue does not name any files, tests, or entry points. Start by locating the experience that configures a custom server and credentials, then review how security guidance is currently presented. Done means adding or linking clear security documentation within that experience and verifying it is visible to users.

Written by the indexing model from the issue text.