[security-dev] PicketLink IDM API Discussion