> D'you mean in relation to the client seeing "xxx-1024-xxx,xxx-2048-xxx" from > the server? No. What sort of client-side policy do you have in mind for which a lower and upper bound on group side is not sufficient? - Bill