Update TLS/SSL section in README; rename to "Encrypted connections"
Use auth-source to read passwords from .netrc/.authinfo files

Specify a line like:

machine example.com login username password s3cret port xmpp

(port should always be xmpp, regardless of the actual port)