Add note about using SSL by default

cc @danielgtaylor @kyleknap