Library
~~~~~~~
) Better/FASTER random numbers (init time is pretty miserable)
) Test suite [still] needs work
) configure stuff: static libs, etc.
) parse the .la file instead of assuming we load the ".so" file
) better support for including missing routines
) check return settings (ssf, etc.) on auth failure
) Make real global objects in cram, digest
) add SASL_SEC_MUTUAL_AUTHENTICATION
) fix DIGEST-MD5 interoperability
) load auxprop/canonuser plugins from shared libs
) convert java bindings to new API

Documentation
~~~~~~~~~~~~~
) so much to do here
) man pages (check spelling) (do saslpasswd, sasldblistusers etc)
) update INSTALL to have clearer step-by-step instructions

Mechs to write
~~~~~~~~~~~~~~
) OTP

Digest-MD5
~~~~~~~~~~
) Checking wacko cases or even not so wacko cases
) Testing
) correct handling of SASL_SET_CREATE
) allow sending multiple realms from server to client
) reauth?
) eliminate last client step. Applications will need to be rewritten.

Kerberos_V4
~~~~~~~~~~~
) client-side should set realm
) is prompt_need callback set default value

GSSAPI
~~~~~~
) Allow specification of alternate keytab file?

Plain
~~~~~

Cram-MD5
~~~~~~~~
) needs snprintf support

Database stuff
~~~~~~~~~~~~~~
) transactions?
) version the database?
) atomic updates of passwords (we can crash and leave the user with 
  different passwords for different mechanisms) [through failure to
  make setpass calls]

ABI
~~~
) Consider IRIX ABI issues for plugins
	- /usr/lib32/sasl?
	- /usr/lib/sasl/{ABI}?
) Standardize the plugin ABI
