PQ WebPKI paper: certs alone aren't enough, so it formalizes context-closed auth and a two-plane LRp for smaller warm-path bytes.