broke the monster PKCS12 test into little ones, and other PKCS12 test additions.
diff --git a/doc/pyOpenSSL.tex b/doc/pyOpenSSL.tex
index 46f1936..5d5ca9d 100644
--- a/doc/pyOpenSSL.tex
+++ b/doc/pyOpenSSL.tex
@@ -262,7 +262,8 @@
 
 \begin{funcdesc}{load_pkcs12}{buffer\optional{, passphrase}}
 Load pkcs12 data from the string \var{buffer}. If the pkcs12 structure is
-encrypted, a \var{passphrase} must be included.
+encrypted, a \var{passphrase} must be included.  The MAC is always
+checked and thus required.
 \end{funcdesc}
 
 \subsubsection{X509 objects \label{openssl-x509}}