Added a note about password-protected SSL keys.

As suggested by Michael here:

https://groups.google.com/forum/#!topic/yesodweb/v4jzpPd8Jkk