[spec] Regarding the proposal to remove status code 11

[Sandra Snan]

The purpose for this status code is in case someone is looking over your
shoulder in the same physical location. That's why it's fine to be an
LSD (least significant digit / optional) code, it's a snazzy feature
that's nice to have but not mandatory. I think it's a good feature.

It doesn't send it unencrypted (i.e. same as any other request) so it's
not security theatre. It's there so people in the same location don't
see your password.