Read, seems fine with one question. Does this document need to
 provide guidance with regards to multiple keys included in the
 KeyInfo field (as in the example in Appendix C)? This is apparently
 allowed. When one is communicating with a service that has multiple
 keys, what criteria should one use to select a key?

(Same comment originally posted to tracker)