This depends on the results of the analysis task - if they're close enough in speed we need to start tweaking
1. Just embedding the authorization system.
2. but still doing remote identity, group, and role.
3. look at adding additional caching on either the client or server side
4. if we did move forward with kim in remote mode we would need to find out transactional operation... updating groups / roles. We would use messaging for this... instead of synchronous updates. That's because if you use messaging the message wont be sent until the transaction completes. Downside, is that the update will be asynchronous... Figure this out.