Add Security Consideration for token expiry

We have only a SHOULD NOT, not a MUST NOT, but be careful if you do.

Change-Id: I74ca6db8369e3fa93874eeb1454e425e58e7922f
Normalize whitespace

Death to carriage return.

Change-Id: I52226634b841addda8db8796edd464ae9a780eaa
reorder packet handling subsections

Put the packet handling descriptions in the same
order as the levels section; clear, auth, crypt.

Change-Id: Iba20ad6eed03782da22653c2b873e2993b996d29
artwork and clarification of RXGK_AUTH packets

Add artwork to show the memory structure for calculating
the MIC and the structure that is transmitted on the wire
for for the rxgk integrity level.

Change-Id: Id2af8c63dfd6efaf8384ce5d5c443221b8b79ade
CombineTokens errors are com_err errors

Move the list of error codes to an AFS-3 registry concerns section,
and make the CombineTokens error codes com_err codes.
Keep a few examples in the body of the text, though.

Change-Id: Iee07bf65f1fe8c7a21b7435feb516570a8338364
GSSNegotiate policy errors are com_err

Either RXGK or application-specific.

Change-Id: I9f88499916f65b60e5bdf336e11f8f46979a3042
Add com_err reference

And point people to it when we mention com_err.

Change-Id: I3b930b415b21fe5f95cc69ac3cc92aff12d19d94
Fix typo

These constants are key usage numbers, not keys themselves.

Change-Id: I63be6941ad33cc41c31734c0dee447ae2accad49
Use less-deceptive art for AUTH

Don't imply that the MIC is a multiple of four octets in length,
and explicitly disclaim alignment of the following payload.

Change-Id: I8e4ac3ed0e2595270df8d00ce471d318d2d009c8
Error table base for RXGK

Change-Id: Ic95583503adac850ede6697f93e21d2b7714c173
Make token data type more consistent

Always use RXGK_Data token.

Change-Id: I731f2844ef1aaf182f8e9f02085d303488d47333
Escape special characters

Annoying for describing these variable-length arrays.

Change-Id: If952685360fb5b2cbd516d68b3e17e1565adfbd7
Add descriptions for RXGK error codes

Also mention what to do when one is received ("abort").

While here, remove the error codes that are not yet relevant and may
never be relevant (COMPOUND_IDENTITY and PRINTED).

Change-Id: I428f89b23499af00ed21486a341271574cf82df3