clarify holder binding

• Clarifies cryptographic holder binding and claim-based subject binding

• adds description in the security considerations section

Issue #1453, #1452