Library
~~~~~~~
) Better/FASTER random numbers (init time is pretty miserable)
) Test suite [still] needs work
) better support for including missing routines
) check return settings (ssf, etc.) on auth failure

Documentation
~~~~~~~~~~~~~
) so much to do here
) man pages (check spelling) 
) programmers/sysadmin guide updates and clarifications
) update INSTALL to have clearer step-by-step instructions

Mechs to write
~~~~~~~~~~~~~~

SCRAM
~~~~~

SRP
~~~
) Testing

OTP
~~~
) Checking edge cases
) Testing

Digest-MD5
~~~~~~~~~~
) Checking wacko cases or even not so wacko cases
) Testing

Kerberos_V4
~~~~~~~~~~~
) client-side should set realm
) is prompt_need callback set default value

GSSAPI
~~~~~~
) Allow specification of alternate keytab file

Plain
~~~~~

Cram-MD5
~~~~~~~~
) needs snprintf support

Database stuff
~~~~~~~~~~~~~~
) transactions?
) version the database?
) atomic updates of passwords (we can crash and leave the user with 
  different passwords for different mechanisms) [through failure to
  make setpass calls]
) locks (to help fortify protection against OTP race attack)?

ABI
~~~
) Consider IRIX ABI issues for plugins
	- /usr/lib32/sasl?
	- /usr/lib/sasl/{ABI}?
) Standardize the plugin ABI
