A few people gave us some inputs. The SEC SIG is moving toward using an SSL type of approach. So you could not get to security level 2. Permits out of band communication. Has nothing to do with portable interceptors.
Possibility exists to have single security service that is portable across ORBs.
Agent groups needs to define what kinds of non-repudiation, integrity services, signing, etc. Can you seal data and carry it around and know it has been tampered with. What about multi-hop authentication. What happens when agent security policy is different than host security policies. One answer is, they are not too unique and different agent systems might need different capabilities.