Add privacy consideration for tracking

... using connection correlation. This fixes #645.
Note privacy implications of PING and SETTINGS

Because these are server-initiated, they can be used
to effect a timing signature of the client.
Editorial updates
No point in under-selling the risk, it's tracking.