Revise documentation and write more if needed.

[infinisil]

This includes things like checking all module header docs, field docs, seeing if the docs render nicely, if some fields should have docs that currently don't have docs. Also checking function argument docs (notably haddock doesn't warn if function args aren't documented).

[infinisil]

Very important, the specifications section on Security considerations for Relying Parties should be prominently pointed out in the docs, or maybe even inlined