avf: add README.md section about spoofing check