KOS iterative extension

Currently iterative extension is disabled for our KOS implementation due to no reference which considers the security of doing so. The correlation check itself is already called into queston by Roy, so we're being conservative here.

I expect we will deprecate KOS in favor of SoftSpoken anyhow, but if we do keep KOS around we should investigate re-enabling iterative extension.

Start by locating the KOS implementation and the code path where iterative extension is disabled. Review the security concerns around iterative extension and the questioned correlation check, while considering the stated possibility of replacing KOS with SoftSpoken. Done means documenting a security-based decision on whether to re-enable iterative extension or leave KOS deprecated.

Written by the indexing model from the issue text.