added via the new Network Security Manager (NSM) and controlled via
the `network-security-level' variable.
+** If Emacs isn't built with TLS support, an external TLS-capable
+program is used instead. This program used to be run in --insecure
+mode by default, but has now changed to be secure instead, and will
+fail if you try to connect to non-verifiable hosts. This is
+controlled by the `tls-program' variable.
+
+++
** C-h l now also lists the commands that were run.