Pardon me if I'm wrong, but doesn't the PAG already allow for multiple credentials? Linus seems to be arguing for multiple PAGs, like multiple GIDs. But I think that functionality is really there, inside the PAG. It seems to me (somewhat) that there is really violent agreement, but varying terms. --Dean