A composite business application model can answer to requests from a web client
written to any of it's component models.  Thus you can use a CFSecurity 2.1 web client
to maintain your security keys and passwords for any application deployment.  The key is
going to be ensuring that the necessary security servlets are produced to the appropriate
$schemaname$ear$version$, $schemaname$[database]war$version$, and $schemaname$war$version$
are produced so that all applicatons share the same security screens and remote messaging
methods.  This will also be the first time I exercise the X(ml)Msg layer customization tags,
so I may find I have to go back and add something more yet.

Remember, I have no intention of developing a web interface in HTML.  My goal is merely
to support account setup and maintenance through security HTML screens, and process X(ml)Msg
requests from the client application.  To me, the web is just another messaging transport
layer.