Update docs about ssl_multicert's interesting way of choosing default certs