Comment by codahale

I really really really don't recommend outsourcing your security architecture to interested passers-by if that's going to be a core feature of your project.