Clarify the eID infrastructure can be run by someone else than government

[dbosk]

The eID infrastructure required by a deployment would most likely be
provided by the entity against which the system is trying to protect.

The main concerns are:

1. The dependence on unique IDs issued by some government body or, more
   generically, some central authority that can prevent sybil-type attacks.
   Basically, the system can not protect against that central authority

[dbosk]

Self-sovereign identity, eIDAS, BankID, ...

[dbosk]

Check if Leonardo's fits here as well.