4 - rethink password setting
6 - maybe prevent deleting / downgrading the last admin user
8 - add supervisor user to supervised accounts
12 - add a user client library that's a front end to the dbus service
17 - approach IPA guys to 'make infopipe like this service'
19 - push forward to minimal, but functional state