Add msgpack submodule dependency.
Add some security notes to keep in mind.
Update on possible msgpack implementation for 'optional'.