-- hook up SAML library
-- hook up RADIUS
-- export/import sec context
-- export/import composite (with attrs) name
+- better handling of mechanism-specific error namespace
+- textual error codes
+- better interfaces for initiator EAP configuration/credential management
+- make CBT ASN.1 ??
+- integration with initiator-side EAP channel bindings
+- integration with final supplicant architecture
+- integration with libradsec
+- port to Heimdal