No editing yet; only movement.

Since the authorities can produce a signed consensus as soon as
`ValidAfter` minus `DistSeconds`, and since they serve a signed
consensus as soon as it has enough signatures, it's possible that a
client or relay that's starting late in the hour can get an "early"
consensus.  Back in tor#25756, we fixed this issue in Tor, but we
didn't document the behavior in the spec.

For indistinguishability, other implementations should pad the same
way that we do.

Right now, tor encodes them in a certain order; specifying that
order can help other implementations be indistinguishable.

There were extraneous entries in the lists of signed key types:
these values describe the type of the key being signed (eg, ed25519
or RSA), not the type of the certificate.

Further, clarify Tor bug 40124, so that people know to expect
incorrect cert key types on older signing->link certs.

Move scheme to allow measurers to skip cell *cryption most of the time
to an appendix; in the short term measurers will verify all cells.

Signed-off-by: David Goulet <dgoulet@torproject.org>

Our docs accurately describe how to remove MAPADDRESS entries, but doesn't
demonstrate it. Exemplifying how to query our mappings and remove them.

  tpo/core/tor#40104