text tweaks and paragraph on using TLS by default