Update tcp.mdx (#26816)

per customer request in support ticket #141025 I've updated the description of tls_disable_client_certs to provide clarification.

previous pr for this change was approved but needed to be resubmitted because of problems with my GH account.  See #26601

website/content/docs/configuration/listener/tcp.mdx

@@ -206,8 +206,8 @@ default value in the `"/sys/config/ui"` [API endpoint](/vault/api-docs/system/co
   used for checking the authenticity of client.
 
 - `tls_disable_client_certs` `(string: "false")` – Turns off client
-  authentication for this listener. The default behavior (when this is false)
-  is for Vault to request client certificates when available.
+  authentication for this listener. The default behavior (when this is false) 
+  is for Vault to request client authentication certificates when available.
 
   ~> **Warning**: The `tls_disable_client_certs` and `tls_require_and_verify_client_cert` fields in the listener stanza of the Vault server configuration are mutually exclusive fields. Please ensure they are not both set to true. TLS client verification remains optional with default settings and is not enforced.
 
@@ -222,12 +222,12 @@ default value in the `"/sys/config/ui"` [API endpoint](/vault/api-docs/system/co
 
 - `x_forwarded_for_client_cert_header` `(string: "")` –
   Specifies the header that will be used for the client certificate.
-  This is required if you use the [TLS Certificates Auth Method](/docs/auth/cert) and your 
+  This is required if you use the [TLS Certificates Auth Method](/vault/docs/auth/cert) and your 
   vault server is behind a reverse proxy.
 
 - `x_forwarded_for_client_cert_header_decoders` `(string: "")` –
   Comma delimited list that specifies the decoders that will be used to decode the client certificate.
-  This is required if you use the [TLS Certificates Auth Method](/docs/auth/cert) and your 
+  This is required if you use the [TLS Certificates Auth Method](/vault/docs/auth/cert) and your 
   vault server is behind a reverse proxy. The resulting certificate should be in DER format.
   Available Values: