-- Check rp_realm COI membership in TR
-- Check idp_realm APC membership in TR
-- Add key confirmation to TID protocol
-- Check gss_name on incoming TID request in TR (in TIDS, too?)
-- Keep single connection open between AAA proxy & TR for TID requests
+DONE Check rp_realm COI membership in TR
+DONE Check idp_realm APC membership in TR
+DONE Check gss_name on incoming TID request in TR (in TIDS, too?)