added federation support, but not managing acls yet