Update SRI note about HTTP sub-resources on HTTPS connections