Eliminating an attack vector means stopping a specific path or method that can be used to break into a system.

"Shift" in this context means that the attacker has to use a different attack vector. They can no longer just access plain text.