SHOULD use mutual authentication when any sensitive data is being retrieved or modified

[boucadair]

From Rich Salz:

I read the security considerations carefully. It did a nice job
pointing out that some of the data could be sensitive so be careful
about exposing it to everyone. The opening sentence "Both of these
protocols have mandatory-to-implement secure transport layers (e.g.,
SSH, TLS) with mutual authentication."
Should probably be followed
with some kind of advice about SHOULD use mutual authentication when
any sensitive data is being retrieved or modified.