update spec doc, notably FQDN requirement