Update todo list on security
Improve docs and interface of ClientApplication

It was pretty undocumented before. Furthermore, the classmethod `usingTCP` did
not accept the optional arguments to the constructor.