Improve CMP documentation regarding use of untrusted certs