Clarify documentation that HTTP replication traffic can be protected with a shared secret.