SEC18 — Regarding Principal Authenticator in security/99-12-02

As I recall, two operations from Principal Authenticator were added to
the Vault interface at one point a year or so ago, with the idea that the
Principal Authenticator would simply pass those calls through to Vault,
rather than implementing them directly. But paragraph [971] still says
that Principal Authenticator may be used by Vault. It's now the other way
round: P.A. uses Vault.

In fact, is Principal Authenticator still one of the replaceable
objects? Since P.A. uses Vault to do its work, it should be enough to
make Vault replaceable. It still says in paragraphs [874], [974] and
[1704] that P.A. is replaceable.

close with revised text