Merge pull request #10055 from gilles-peskine-arm/tls-defragment-doc-3.6

Backport 3.6: Document the limitations of TLS handshake message defragmentation