> That ... does not scale well.  Nor does it handle Special auth schemes
> that local sites might want to use (would you rather just write your
> dynamically-linked auth object, or hack libc?)

Hack libc, hack libc!! Now..  where's that penance whip and my prayer 
beads..