I think the access secured pages permission should be mentioned on the secure site help page (admin/help/securesite) as well.

Additionally, I think a link to the help page from the settings form might be in place.