Updated Security Considerations

Added more emphasis to  how only allowing OLRs in answers, and implicit
determination of host, realm, and application, help mitigate third
party attacks. Added language on the potential problem of undetected
non-supporting agents. General editorial updates.