Add note about unsigned but encrypted messages

There are reports of users who have never seen a trusted signed
message and then think that signed with untrusted keys is
less secure then encrypted only.