some sort of remctl integration

[cg2v]

There should be a way to leverage remctl to allow for more complicated access control.
e.g. a remctl operation could add a record to the database allowing a specific user to use SIMPLEKEY on a specific principal one time.
Or to allow hosts (host principals) to create new service principals for themselves.