Make it more obvious that check-sni requires an argument, and that it can only be a string. Also refer to sni for proxied traffic. This can be backported to 1.8 as check-sni appeared in 1.8.