>PPID identifiers have no history, no data, and no reputation - why >would any RP want this? Why would Charon want Kinit's ticket-granting ticket when it can just authenticate a user directly? -Shade