I wrote this recently:
https://gist.github.com/plsql/49e642d5bce835df2946
Thanks so much for considering security! It's a very important and often neglected aspect of Tor relay operation.
Let me know what you think of the document.
Libertas
I just started to look at it, but it seems to be EXACTLY what I was looking for. Thank you so much! +-- relayacab +--