all i know is, cryptographic identities are central. i mean, look at the whole pgp architecture. we haven't even yet fully seen this, revocations, split auth/encryption.