Update 03_secure_connections.md

Remove suggestion that CA's sell private keys instead of certificates. Sharpen distinction between compromised operators and man-in-the-middle attacks.
Merge pull request #67 from gbroiles/master

Update 03_secure_connections.md