I wrote up an essay that, I hope, explains where Keystone is headed as far as token management. http://adam.younglogic.com/2013/07/a-vision-for-keystone/ It is fairly long (2000 words) but I attempted to make it readable, and to provide the context for what we are doing. There are several blueprints for this work, many of which have already been implemented. There is at least one that I still need to write up. This is not new stuff. It is just an attempt to cleanly lay out the story.