Following from #330080: crawl/ReCrawl as X user

I think some README and best practices are in order:

1) It's important to enable all blocks for the theme/roles that the scanner will see to verify that all blocks are safe.
2) If multiple themes are available on the site, the admin should re-run the test with each theme as the default to test them.