Add documentation for client_allowed_sans

[goat-ssh]

Fixes #4564

[SuperQ]

Thanks, since this is not really user facing we don't include changelog entries.

[ajaychandrak2002-bit]

you can do change.md();