Very cool! We're also considering building a mac app, that elegantly solves all the access control / compliance concerns
The downside is that in client-only arrangement state is no longer centrally managed; I wonder how do you solve that? Or do you have a "hybrid" model with some parts on the client and others on the server?