Move threat model doc to GitHub

Move threat model doc to GitHub
I thought I had an assumption that meant that such an attack was not a part of the threat model, but I was wrong. I have added this under the "global adversary"-heading. If you have suggestions on how to split this into active versus passive, let me know and I'll update the document.