I have reviewed this draft as part of SECDIR. Please treat my comments as any other comment. The draft has good security recommendations and should proceed.