security & trust: some minor updates and clarifications

rename active / passive -> configured / cached trust
specify key-derivation mechanism for PSKs
add more clarifications at various points
spellchecking