doc: warn about GCM authenticity

PR-URL: https://github.com/nodejs/node/pull/18376


Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>