add note about rotating session ticket keys