I believe the utility of the ident protocol for a general Internet security schema is basically zero. That said, if we're going to be making it part of the system, where is the LKM for a system call to grab the data it wants faster than schlepping through /dev/kmem? Right now, it's expensive. Erik