UTR #36: Unicode Security Considerations