(SERVER-108) Further external ssl doc clarifications

This commit includes wording changes in the docs to hopefully further
clarify the behavior when the `allow-header-cert-info` setting is set to
true and an SSL connection is being made to the Puppet Server.