Hi, In the Trust implementation, we have used sts_client to interfacing client programmer and trust module. Our main objective is to ease the work of a user has to do when he is using the trust module by doing most of the work inside the sts_client. But this approch not restricts the user from following the common approach when we are using a svc_client. Any user can use the normal approach other than using sts_client.
But if are going to restrict only ro sts_client, we have have to do sevaral unwanted delegations. So, I think we can add another sample case which not strictly depending on sts_client. (I thinks we currently have one similar to this in secpolicy scenario 20 which deals with RST Template and Trust) Thanks, Kasun