clarify envvar vs. SSL variable

from Ben Laurie's comments at https://groups.google.com/forum/#!topic/certificate-transparency/bOyMRAKR_es