Rewrite of the threat model document, now more detailed and specific.