The changes, which are open to public comment, focus on user identity management and protecting cryptographic keys, among other security protocols.