Clarify the distinction between ``m.key.verification.start`` and its ``m.sas.v1`` variant.