Add threat model questions

This isn't meant to be merged, but is a good place to start dialogue.

I'd really love to know more about the threats that the security protocols are designed to cover, and even more so, what's considered an acceptable price.

Setting up SSL with a central CA model can be pretty time-consuming, and needs a fair amount of maintenance, often including fees.