Add permissions/references note to file --disable-references

[carstenhag]

We stumbled across this issue, as we devs didn't have access to the projects that contained the referenced keys.

Maybe this place is not ideal, but I looked at this place first whether we had disabled references :D. You know better where this would fit though 😄