[PATCH] news: document improved certs, host validate details & TDX fix