"Greg A. Woods" <woods@weird.com> writes:

> No authentication mechanism ever need run in the environment of the
> user.  All claims to the contrary have been unjustified.

In theory you may be right, but in practice there's AFS. You could
argue that AFS should be implemented differently, but currently it
isn't.

/Johan