very minor comma, etc changes
more clearly state the differences between 4033 and 4035 contexts
mention that validating stub resolvers SHOULD be used
clarify a comment
insert "security-aware" in a couple of places
a personal comment to work on a section