[Extracted from Blair Dillaway's mail to the list.]

 These are good concrete examples, but there isn’t enough discussion about the target environment/threats to help me 
understand what required, what is optional, what is unnecessary to meet grid needs. For example, in 3.1 is asks what 
client authN a ByteIO service might require? It would be better to describe a specific environment where the 
functionality in the express authentication specs is the answer. The firewall traversal discussion is interesting as it 
describes a firewall as an explicit message processing intermediary. How does this interplay with the requirements 
described in the secure SOAP messaging document?