[security-dev] IDM and vault are the same thing

[David M. Lloyd]

Consider:

IDM:
* associates identities with credentials
* provides ability to retrieve credentials or verify against credentials

Vault:
* associates identities with credentials
* provides ability to retrieve credentials or verify using credentials

So, they're basically the same thing, except vaults are kind of a crappy 
hack.  Instead of using a sys prop kludge for vaulted passwords, we 
should have an explicit reference to an identity store plus an identity, 
and simply not have a field for passwords in the config, period.

Discuss

-- 
- DML