Add a section in README to explicitly explain the same GENERATE_SECRET would get different password

[roxk]

The are examples below that implies this but we better explain this up front.

Adding such descriptions in --help would be a bonus.