TSAS — Section 2.2.2.2 authenticate challenge/response are of type string

Section 2.2.2.2 authenticate challenge/response are of type string. Is
doesn't seem to be the right type used for encrypting data. Use e.g.
opaque as in the
CORBA security service specification.
There is a missing link between the authentication and the subsequent
request-access or the subsequent access interface references. As a
result of
authentication, a token or credentials should be added that can be used
as
input for request-access and the access segments (See also 2.2.1.2).

see above