Additional operations

[Tom Jordan <tjordan@xxxxxxxxxxxxx>]

Folks,

In addition to the specified operations (GET-PUT-DELETE), I'd invite
discussion on the need for operations to be applied by an administrative
user. I'd propose two new operations - LOCK and UNLOCK that would
respectively limit or allow a user to retrieve credentials without the
need to destroy the credentials themselves.

Granted that this implies maintaining some state information regarding the
opaque credentials themselves, but perhaps there's some value to it.

	--Tom