Clarify what commenting *.pubxml does

https://github.com/github/gitignore/commit/08def965cd1c0241a7cffbe7c26a74b3cab61243 incorrect states that commenting *.pubxml will keep your passwords hidden when it will actually do the opposite. This clarifies what commenting *.pubxml does and warns you of the dangers.