added protocol flow diagram, closes #80
editorial updates
IAT is out of scope
added vspaces
added credential rotation discussion