tweak wording for tls recommendations