Update src/cli.rs

Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Signed-off-by: Nikhil Sinha <[email protected]>

Author: nikhilsinhaparseable

src/cli.rs

@@ -207,7 +207,10 @@ pub struct Options {
     )]
     pub trusted_ca_certs_path: Option<PathBuf>,
 
-    /// Set client to skip tls verification
+    /// Allows invalid TLS certificates for intra-cluster communication.
+    /// This is needed when nodes connect to each other via IP addresses
+    /// which don't match the domain names in their certificates.
+    /// SECURITY NOTE: Only enable this for trusted internal networks.
     #[arg(
         long,
         env = "P_TLS_SKIP_VERIFY",