[SSL] AOP: remove steps for origin_tls_client_auth vs settings/tls_client_auth (#25394)

* [SSL] Update per-hostname.mdx

* [SSL] Update zone-level.mdx

---------

Co-authored-by: Rebecca Tamachiro <[email protected]>

Author: ngayerie

src/content/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/per-hostname.mdx

@@ -46,21 +46,17 @@ In the API response, save the certificate `id` since it will be required in step
 	product="ssl"
 />
 
-## 3. Enable Authenticated Origin Pulls (globally)
-
-<Render file="aop-enable-feature" product="ssl" />
-
-## 4. Enable Authenticated Origin Pulls for the hostname
+## 3. Enable Authenticated Origin Pulls for the hostname
 
 Use the Cloudflare API to send a [`PUT`](/api/resources/origin_tls_client_auth/subresources/hostnames/methods/update/) request to enable Authenticated Origin Pulls for specific hostnames.
 
 If you had set up logging on your origin during step 2, test and confirm that Authenticated Origin Pulls is working.
 
-## 5. Enforce validation check on your origin
+## 4. Enforce validation check on your origin
 
 <Render file="aop-enforce-validation" product="ssl" />
 
-## 6. (Optional) Set up alerts for hostname-level Authenticated Origin Pulls certificates
+## 5. (Optional) Set up alerts for hostname-level Authenticated Origin Pulls certificates
 
 You can configure alerts to receive notifications before your AOP certificates expire.
 

src/content/docs/ssl/origin-configuration/authenticated-origin-pull/set-up/zone-level.mdx

@@ -54,17 +54,11 @@ Using a custom certificate is required if you need your domain to be [FIPS](http
 
 <Render file="aop-enable-feature" product="ssl" />
 
-## 4. Enable Authenticated Origin Pulls for all hostnames in a zone
-
-Use the Cloudflare API to send a [`PUT`](/api/resources/origin_tls_client_auth/subresources/settings/methods/update/) request to enable zone-level authenticated origin pulls.
-
-If you had set up logging on your origin during [step 2](#2-configure-origin-to-accept-client-certificates), test and confirm that Authenticated Origin Pulls is working.
-
-## 5. Enforce validation check on your origin
+## 4. Enforce validation check on your origin
 
 <Render file="aop-enforce-validation" product="ssl" />
 
-## 6. (Optional) Set up alerts for zone-level Authenticated Origin Pulls certificates
+## 5. (Optional) Set up alerts for zone-level Authenticated Origin Pulls certificates
 
 You can configure alerts to receive notifications before your AOP certificates expire.