- Ucon able to recover sessions at its own startup
- policies changeable at runtime and during service
introducing private attributes