Checked Karl's comments wrt authenticator and underlying transport se…

[jariarkko]

…curity

This was part of the security considerations suggestions from Karl, but treated separately.