>In particular I get the impression that Ken needs something stronger >than Linux keyrings and AFS PAGs have tended to provide: cross-session >process isolation. My reading of the Linux keyring documentation is that there is "session-specific" keyring. I haven't yet dug into keyrings in more detail, but that at least sounds like the right thing. --Ken