Revisit identifiers spec

Partially addresses #1135.

This is the result of discussions in the past few days about imprecision and confusion. Hopefully simpler. There are a few FIXME comments in the doc - discuss.
I'd just remove the comment about Docker's ID, then, but whatever.