doc: separate the HTTPS statement under one heading

also change "secure" to "encrypted"