fix typos, added PFS clarification, added note about public key identifiers not being subject to the key validation problem in the same way.