implement basic ACL for debug http
diff --git a/README b/README
index 940db3f..2147adb 100644
--- a/README
+++ b/README
@@ -43,6 +43,7 @@
 
  - `-listen_address` (default: `127.0.0.1:4200`): where to listen for gRPC requests
  - `-debug_address` (default: `127.0.0.1:4201`): where to listen for debug HTTP requests
+ - `-debug_allow_all` (default: false): whether to allow all IP address (vs. localhost) to connect to debug endpoint
 
 Since this library also includes [hspki](https://code.hackerspace.pl/q3k/hspki), you also get all the typical `-hspki_{...}` flags included.