C2MS11 — Message-level Security Credentials

Justin Boss:
A username or alternate security credential should be able to be provided with all C2MS requests (and possibly should be required)?

Systems should not automatically trust remote clients and therefore a credential should be required with all messages. This would allow components to authorize and audit requests on a per-user/connection level.