Update 03_secure_connections.md

Remove suggestion that CA's sell private keys instead of certificates. Sharpen distinction between compromised operators and man-in-the-middle attacks.