Security considerations of adding extensions (secdir review)

[cabo]

Archived-At: https://mailarchive.ietf.org/arch/msg/cbor/PQmYkzHYKJtWgljWqhhg0G4Cyhk

Clearly, an extension can be architected to have security implications (exhibit a), so this is a good point.