thank you very much for your feedback. You are right, there were some web.config keys missing in the "Web.config reference" section. I went through the whole "Securing websites" chapter and I found four web.config keys:
related to security not mentioned in "Web.config reference" section. If you are interested in it, see the documentation section Reference - Web.config application keys.
Have a nice day.