[master] d7147ce48 doc: Update read-only suggestions for vcc_feature

[Dridi Boukelmoune]

commit d7147ce4886e29863bd60bc6b7a2a384e700e647
Author: Dridi Boukelmoune <dridi.boukelmoune at gmail.com>
Date:   Fri May 2 15:19:32 2025 +0200

    doc: Update read-only suggestions for vcc_feature
    
    Fixes #4323

diff --git a/doc/sphinx/users-guide/run_security.rst b/doc/sphinx/users-guide/run_security.rst
index 121b47f6a..48afe4373 100644
--- a/doc/sphinx/users-guide/run_security.rst
+++ b/doc/sphinx/users-guide/run_security.rst
@@ -155,18 +155,18 @@ HTTP service, but a few can do more damage than others:
 :ref:`ref_param_cc_command`
 	Execute arbitrary programs
 
-:ref:`ref_param_vcc_allow_inline_c`
-	Allow inline C in VCL, which would allow any C code from VCL
-	to be executed by Varnish.
+:ref:`ref_param_vcc_feature`
+	The ``allow_inline_c`` flag would allow any C code from VCL to be
+	executed by Varnish.
 
 Furthermore you may want to look at and lock down:
 
 :ref:`ref_param_syslog_cli_traffic`
 	Log all CLI commands to `syslog(8)`, so you know what goes on.
 
-:ref:`ref_param_vcc_unsafe_path`
-	Restrict VCL/VMODs to :ref:`ref_param_vcl_path` and
-	:ref:`ref_param_vmod_path`
+:ref:`ref_param_vcc_feature` again
+	The ``unsafe_path`` flag allows VCL/VMODs to be loaded outside of
+	:ref:`ref_param_vcl_path` and :ref:`ref_param_vmod_path`.
 
 :ref:`ref_param_vmod_path`
 	The directory (or colon separated list of directories) where