A set of abstractions & tools useful for dealing with user identity