Not so long ago, we went to lunch at a Sushi joint on Castro street in Mountain View across from NorthScale's modest HQ. On the way over we were talking about Japanese robatayaki and Dave told a story about an Oscar speech for a Japanese animator who works for a company named Robot.
One other feature we were able to easily put in place leverages security capabilities in OpenSolaris. In the Solaris least privilege model, a process can take privs away from itself. Why would it do that?