Extra authentication; new roles; address filtering (recognize VPN path etc); bundling control...