Make REQ-SEC-4 more precise
Write low-level requirements. Update to do list