Revisit identifiers spec

Partially addresses #1135.

This is the result of discussions in the past few days about imprecision and confusion.  Hopefully simpler.  There are a few FIXME comments in the doc - discuss.
Not necessarily (see how kubelet can generate an ID)