added a section on certificate-usage selection for protocol designers
wording changes to move the don't mix text cases around