On 5 Dec 2013, at 00:37, Jason Edgecombe <jason@rampaginggeek.com> = wrote: > Do the combined entries allow for you to restrict an ACL to the = intersection of a user and host? I can't speak for what OpenAFS will implement, but that was my intent = when I designed the current rxgk token format, and YFS will support = doing so, Cheers, Simon