Looks good, thanks for addressing my previous comments.

(nit, not security related) In section 3.3, I think "off" should be "of"?