Complete a design for isolating Tor modules

We've been kicking this around for a while; we should actually commit to something in a text file so we can argue about it. December is a good target.