be more precise about the SecureRenegotiation extension, addresses #3