Some improvements, questions and fixes

This PR contains a number of issues. Please feel free to comment what I should remove, I will make a PR which contains only the things you accept as contributions, so you do not need to hand-merge them.
I think this chunk is fine as is.  The Web PKI is a motivating example here, for a protocol oriented around validating possession of identifiers more generally.