Mention tracking by alt-svc host name in Security Considerations (#36)