LP-6 added auth.legacy-protocol-refused to the packaged schema, which this branch also changes. The file is gzipped, so the two can't be merged line by line: this takes main's schema and adds the Settings › Security › Hardening link to it again, with the hash recomputed.