docs: Add reasoning for the allowance of http as well as user certs

Signed-off-by: Andy Scherzinger <info@andy-scherzinger.de>

Author: AndyScherzinger

app/src/main/res/xml/network_security_config.xml

@@ -4,6 +4,11 @@
   ~
   ~ SPDX-FileCopyrightText: 2017 Mario Danic <mario@lovelyhq.com>
   ~ SPDX-License-Identifier: GPL-3.0-or-later
+  ~
+  ~ We are allowing http (cleartextTrafficPermitted) since we don't control the server-setup while strongly
+  ~ suggesting TLS/SSL.
+  ~
+  ~ We allow user-certificates as well so managed device can make use of self-signed/client certificates.
 -->
 <network-security-config>
     <base-config cleartextTrafficPermitted="true">