Rework 1.3~rc1 changelog.

debian/changelog

 tails (1.3~rc1) unstable; urgency=medium
 
   * Major new features
-    - Install the electrum bitcoin client from wheezy-backports, and
+    - Produce the Tails image in hybrid mode (again) so that the same
+      image can be installed both on DVD *and* "hard disks" like USB
+      storage and similar. (Closes: #8510)
+    - Confine the Tor Browser using AppArmor. (Closes: #5525)
+    - Install the Electrum bitcoin client from wheezy-backports, and
       add a persistence preset for the Live user's bitcoin wallet. If
       electrum is started without the persistence preset enabled, a
-      warning is hown. (Closes: #6739)
-
-  * Hardening
-    - Sandbox the Tor Browser using AppArmor. From now on it can only
-      access the "~/Tor Browser" (default) and "~/Persistent/Tor
-      Browser" directories; the latter is only created if the
-      persistence preset is enabled. Both have bookmarks added in
-      GTK's file chooser, and GNOME's Places menu. (Closes: #5525)
-    - Install a custom-built Tor package with Seccomp enabled but
-      enable it when no pluggable transport is used. (Closes:
-      #8174)
+      warning is shown. (Closes: #6739)
 
   * Bugfixes
     - Have tor_bootstrap_progress echo 0 if no matching log line is
@@ -24,8 +18,11 @@ tails (1.3~rc1) unstable; urgency=medium
       e.g. embedded spaces correctly. (Closes: #8603, #8830)
 
   * Minor improvements
+    - Install a custom-built Tor package with Seccomp enabled;
+      enable the Seccomp sandbox when no pluggable transport is used.
+      (Closes: #8174)
     - Install obfs4proxy instead of obfsproxy, which adds support for
-      the obfs4 pluggable transport to Tor. (Closes: #7980)
+      the obfs4 Tor pluggable transport. (Closes: #7980)
     - Install GnuPG v2 and associated tools from wheezy-backports,
       primarily for its improved support for OpenPGP smartcards. It
       lives side-by-side with GnuPG v1, which still is the
@@ -43,9 +40,6 @@ tails (1.3~rc1) unstable; urgency=medium
       * Torify Git with tsocks, instead of setting GIT_PROXY_COMMAND.
         (Closes: #8680)
     - Use torsocks for whois and Gobby, instead of torify.
-    - Produce the Tails image in hybrid mode (again) so that the same
-      image can be installed both on DVD *and* "hard disks" like USB
-      storage and similar. (Closes: #8510)
     - Refactor the Unsafe and I2P browser code into a common shell
       library. A lot of duplicated code is now shared, and the code
       has been cleaned up and made more reliable. Several