Revisit identifiers spec

Partially addresses #1135.

This is the result of discussions in the past few days about imprecision and confusion. Hopefully simpler. There are a few FIXME comments in the doc - discuss.
If we plan to take advantage of docker restart, then using Docker's id would not last long. I'd rather just start with an approach we think has legs.