Apply suggestions from code review

Co-authored-by: Johann Hofmann <[email protected]>

Author: stephenmcgruer

index.bs

@@ -1106,7 +1106,7 @@ spec:css-syntax-3;
     4.  Let |sameOriginWithAncestors| be `true` if the [=current settings object=] is [=same-origin
         with its ancestors=], and `false` otherwise.
 
-    5.  If |options|[{{CredentialCreationOptions/publicKey}}] [=map/exists=] then
+    5.  If |options|[{{CredentialCreationOptions/publicKey}}] [=map/exists=] and
         if |settings|' [=relevant global object=]'s [=associated Document=] is **not**
         [=allowed to use=] the [=publickey-credentials-create-feature|publickey-credentials-create=]
         [=policy-controlled feature=] return [=a promise rejected with=] a "{{NotAllowedError}}"