> > You basically asked how to architecture a security aspect of your software. And you asked for other people's experiences to boot, instead of a canonical solution.

> That's exactly what I want to discuss on SO.

Broad-ish architecturing questions belong on https://softwareengineering.stackexchange.com/ (formerly known as programmers.SE). A good rule of thumb for which of those two sites to go to is, does your question have code?

(Also, "discuss" is a forbidden word on StackExchange - it's Q&A, not discussion)