Clarify SAS commitment calculation for `m.key.verification.accept` messages.