Status: 
General Comment: Thank you for your careful work on this document. 
Ready with Editorial Nits: 

#1 page 25 - add period to sentence 

     identity vn-computation-error-not-ready {
       base vn-computation-error-reason;
       description
         "VN computation has failed because the MDSC is not
          ready";
     }

#2 Security section: Grammar 
Old/
   *  ap: this list includes a set of sensitive data that influences how
      the access points in the VN service are attached.   /
New:/ 
   *  ap: This list includes a set of sensitive data that influences how
      the access points in the VN service are attached.   /

Old:/
   *  vn-ap: this list includes a set of sensitive data that influences
      how the VN service is delivered. /
New:/
   *  vn-ap: This list includes a set of sensitive data that influences
      how the VN service is delivered.
/
Old:/
   *  vn: this list includes a set of sensitive data that influences how
      the VN service is delivered.  By accessing the following data
      nodes, an attacker may be able to manipulate the VN./
New:/
   *  vn: This list includes a set of sensitive data that influences how
      the VN service is delivered.  By accessing the following data
      nodes, an attacker may be able to manipulate the VN./
Old:/
   *  vn-member: this list includes a set of sensitive data that
      influences how the VN member in the VN service is delivered.  By
      accessing the following data nodes, an attacker may be able to
      manipulate the VN member./
New:/
   *  vn-member: This list includes a set of sensitive data that
      influences how the VN member in the VN service is delivered.  By
      accessing the following data nodes, an attacker may be able to
      manipulate the VN member./