[security-dev] IDM and vault are the same thing

Consider: IDM: * associates identities with credentials * provides ability to retrieve credentials or verify against credentials Vault: * associates identities with credentials * provides ability to retrieve credentials or verify using credentials So, they're basically the same thing, except vaults are kind of a crappy hack. Instead of using a sys prop kludge for vaulted passwords, we should have an explicit reference to an identity store plus an identity, and simply not have a field for passwords in the config, period. Discuss -- - DML