While it seems quite clear how we can implement points 1 - 4, it seems to be a whole new problem to implement some kind of user management for our systems.