Again, my main criticism of Gluu is lack of a transparent security record (I posted a bit more on this lower down in this thread).