It's very hard to manage all this well. If you've experienced it, you know just what I mean.

So what about a service where you can store all your login credentials on a per-project basis and grant users access to a project generally or on a time-restricted basis?

Key features: * Users IDed with client certs. * All crypt done on the client--server never sees your passwords ever. * All access logged, and access by your "backup support" (e.g.) could trigger an alert to other project users. * Optional daemon account to whom you can grant access. Runs every day and attempts logging-in (ssh, ftp, http basic at first, later app-specific support) to everything in the account. Alerts everyone if a credential no longer works.

Worth paying for? Stupid idea? Been done already? I value your feedback.