Fixups for 9.2

See commit log for details on changes.
Nit: fold two sentences into one with "... and TLS 1.2 is restricted; they MUST only be used with those that permit..."

This avoids the second sentence being read in isolation and being understood to apply to all versions of TLS with HTTP/2.