I believe from conversations with Tim part of the spec is missing. In particular the case doesn't mention that there is a new role created and what the reserved system uid for it is and what profiles the role has.
The case also mentions TIMFauto-snapshot as an exported interface, I'm sure this is supposed to be SUNWauto-snapshot or something similar. Other than the issue with the missing details on the role, the case looks architecturally sound to me, but until I see the details on the role I reserve the right to change my mind. -- Darren J Moffat
