Security

TODO: describe the security model we use for federation.

• http signatures
• behavior for refusing requests
• how data is protected