add docs on strict-ssl