Update 'MagicBox : Magicbane in a Box'

MagicBox-%3A-Magicbane-in-a-Box.md

@@ -182,4 +182,11 @@ It is advised that the Magicbox administrator ***not*** edit the following value
 ```MB_PUBLIC_ADDR="0.0.0.0"``` <br>
 ```MB_BIND_ADDR="0.0.0.0"```
 
-This instructs Magicbane to self-configure the bind address and public facing ip.  
+This instructs Magicbane to self-configure the bind address and public facing ip.
+
+
+### Security
+
+The MagicBox container is perfectly secure out of the box.
+
+It will not be so secure if you start additional services and open additional ports.  Try not to install ssh server on a machine that shares the same passwords and deploy key as every other MagicBox!