ciphers(1): add note about SRP to description of aNULL

see section 2.5.2, section 3.1 and 3.3 of rfc5054 for explanation
why SRP cipher suites that do not use server certificates are
not vulnerable to MitM