Longer term projects Hardware crypto support in OpenSSL IPSec-aware TCP wrappers Rate limiting within crypto framework Striping network interface Process containment Pushing policy up into the kernel Allows for policy-based sandboxing