I don't buy into these second layer solutions. They are still limited in terms of scalability (they just push the limit back a bit) and operational complexity tends to get out of control and that makes them much more vulnerable to exploits (especially DoS attacks which attempt to prevent or delay state changes and attacks which try to roll-back state changes).