first cut at dynamic dual realm (SSO and User/Pwd) support.