I have provided the secdir review on -13 of the draft. I have the same conclusion as before: this document is well-written and considers security issues carefully throughout the whole architecture. But I don't see your author's response to my -13 secdir review, so please double check you had addressed all my previous comments and nits. Besides above, I think the draft is ready.