What do people on this group think of the Liberty Alliance specifications for Federated Identity? How do they see kerberos fitting in with these?