- Stop invalid users
* a recently disabled/deleted user may still have a valid cred. Keep a list of valid/invalid users on the aggregate and check callers against this list
- Component manager
* GetTicket - must verify_{site,slice,person,keys} on remote aggregate
- Stop invalid users
* a recently disabled/deleted user may still have a valid cred. Keep a list of valid/invalid users on the aggregate and check callers against this list
- Component manager
* GetTicket - must verify_{site,slice,person,keys} on remote aggregate