[security-dev] PicketLink workspace proposal