Add docs that explain how to securely pickle things

[poljar]

One could leave private key data in memory if the pickling is used as just a dumb serialization. We should add examples and docs warning about this pitfal.