I have made a lot of comments to the current blueprint at the etherpad set up yesterday https://etherpad.openstack.org/service-endpoint-isolation-role-delegation I await your comments regards David