MIX: Brian's feedback.

* Marked 'deprecated TLS-protection' as at risk.
* Changed "or" to "and" in the optionally-blockable section.