List the desired references for the NIST Cybersecurity supplemental document

It was decided that we would reduce the required amount of references for the NIST Cybersecurity supplemental document to 5-10 publications. Together these publications should provide an holistic view on the way MQTT security should be implemented. Members of the TC are free to suggest references to build a list. We can then debate over which ones we wish to keep.