Add AFS registry section for rxgk-afs

We need to register new RPC numbers.

Change-Id: Ia31585e7fc9ed6d072f82a725f54a3262f45698a
Improve language for securing AFSCombineTokens

That is, what sorts of connections to use for it.
Cribbed from CombineTokens.

Change-Id: I5707b802f8deb79312731c71173c1bc56351349c
Less trivial things from Deason's notes

Or inspired by them, at least.

Change-Id: I39a93a5a9d1295e6f084bc8aabf68743e4f95fcb
No SHOULDs in the security considerations

From Deason's notes, approximately.  Security considerations are
not really a normative part of the document.

Change-Id: Id2ebf11212da98b9ceed844920f1148719aa1b93
Place automatic key generation in context

It's similar security properties to using kadmin to extract a keytab.
Inspired by Simon's response to Deason's notes.

Change-Id: I07f3e05a0f81b926ef6f97ebf1a6d8f3a8363581
Don't define RXGK_TokenInfo twice

One of them should really be the RXGK_Token, which is referred
to from elsewhere in the document.

Change-Id: I116715eec62fa08812b8dcecd399614c8e9e5541
Wordsmith VL_RegisterAddrsAndKey

The artwork has structures as well as the RPC signature, so don't
just say "the following RPC".

Change-Id: Ia514d08a9f0c96fb5de1840d31415f36f441c3e5
Wordsmith appdata within RXGK_Authenticator

An opaque appears within a structure, not a random thing.

Change-Id: I6cc1689a987f2b977618b17c9a553b956a43dac5
Wordsmith around RXAFS

The central.org registry has the service listed as RXAFS, even
though Andrew thinks it is the AFSINT protocol.

Change-Id: I700a4bc7d85b66103879eb9c4cd83e54278d0b89
Spell as SetCallBackKey for consistency

From Deason's notes on section 10.

Change-Id: Idbc93c5a3fa1be7c4ccd36e2ccac615c28d3f4c0
Add reference for extended callbacks

Informational, since we don't depend on them.

Change-Id: I86b669ea5f5b25d8ee7d91bd6ef9b03a84b19392
Clarify requirements on AFSCombineTokens connections

Change-Id: Ic5e177dfd2f8736d4e3a488f0165d51ab8555054
Fix typo (startTime for starttime)

While here, fix a whitespace bogon.

Change-Id: I9b43c939933cecc29547650cf19f4c11b2ec174b
Edit for grammar, punctuation, spelling, etc.

Also added a cross reference for RXGK_SERVER_ENC_TOKEN while
correcting its spelling.

Change-Id: Idd7dd95cac5d5a8717feab5b08333754fb1a96ce
Semicolon police (in artwork)

Make these more likely to be compilable.

Also remove a stray slash character that crept in.

Change-Id: Iec9580f31aa85fda2b0cbbddd48386c2329831fb
Title case for section headings

Change-Id: Ic3fc6340ae35c8a8695ca9c7da349fec3c5bcb7b
More RPC-L tweaks

Tokens are RXGK_Data which is already a variable-length type,
and does not need to be marked again as variable-length.

The nonces used in server key generation are specified to be
20 bytes of random data, so use that in the RPC-L as well.

Change-Id: I3c82753353837e0f66bf3c84b3e0f00ed74504d3
Grammar-o

If you have a single cell-wide key, you don't get per-server keys, too.

Change-Id: Ib044ad9d707f11e7548a2ae1cfe2068fa6de2864
s/renew token/regenerate token/

We don't have a way to renew a token; the cache manager must obtain
a new one (possibly using new or renewed credentials) instead.

Change-Id: I8c45553066c9c0957d0fcaec953e31b5146ba0d3
Add comma around parenthetical clause

Change-Id: I27b855c2ba665fd47f7b1806c273b9ee2dd371fc