Corrects documentation that stated requests already in flight retain their
established state when a credential is rotated or revoked. Persistent SSE
sessions are deliberately invalidated; 0.14.1 shipped the false claim in an
immutable tarball and this release is how the correction reaches users.

Also carries the CLI help correction for live-safe client administration
commands and the matching SECURITY.md fix.