I have previously done an early review of version -09 of this draft. At the time I was impressed by the breadth and depth of the security considerations but found a few nits. In version -10, the breadth and depth are still there with that section taking no fewer than 18 pages in the text version. Unfortunately, the nits are also still present.