More power to you.
This is a fantastic idea, piece of code, notion.
I figure everything in the world ought to be two things, certificate-based & LDAP-based. I suppose if we authenticate everything (ie: log-in's, call privileges, et cetera, et cetera) via LDAP, then we are 2/3 the way there.
As soon as our entire organization (ie: including calls) can be authenticated & encrypted via certificates (ie: which I understand is on the way), then I will crack open a frosty one & relax.
Peace. Love. Linux.