added PFS to --secure-protocol
NEWS: cite Perfect-Forward Secrecy