> Using X.509 certificates...

X.509: just say no.  Anyone who thinks they want an X.509 decoder in
their kernel is insane.

You can do the same thing with public key signatures and without X.509
with a lot less overhead, fuss, and muss.

						- Bill