Review public API and add documentation

[bifurcation]

Right now, most of the API is private (starts with a lower-case letter). We should consider whether it would be useful to expose more lower-layer primitives, e.g., to facilitate testing of other stacks (à la FlexTLS). We should make sure that all public types and methods are documented.