I've written up a very high level design based on what we discussed yesterday. Please provide comments so we can flesh it out further. http://pki.fedoraproject.org/wiki/Enhancing_DRM_Authentication_and_Authorization Thanks, Ade