[tor-project] Three Tor security goals for the network layer