Revisit identifiers spec

Partially addresses #1135.

This is the result of discussions in the past few days about imprecision and confusion. Hopefully simpler. There are a few FIXME comments in the doc - discuss.
We need a UID, but if we leverage Docker's it is not a UUID.  Not sure how far this goes off-kubelet.