# $Id: TODO,v 1.9 2012/10/19 14:44:04 ksb Exp $

This would be pretty cool.  Build a service that mocks being stampctl.
I mean we would use stamp(8l) as the client.  It would cache a local
copy of a list of "access flags" for every local login.  These flags
could come from LDAP, a local file, a network service, DNS, or from
some other local data source.  Cache them accordingly.  When the stamp
jacket connects it asks for the required access flags, failing if as
the jacket doesn't permit each.  Easy.  But the service doesn't belong
here, just crib the stampctl API.  Build it in ../road (remote op access
daemon).

There is a nit in xdisplay: it might-should allow a UNIX domain socket, like
from ssh -Y and fall back to no forward if there is not a $DISPLAY in the
environment.  Now it fails the escalation.

Nothing else but test and polish a little.

--ksb, Oct 2012