TODO (in no particular order)
====

* 'hostbased' authentication
