Well, I'll attack the file based cred cache.. starting with something easy sounds like a good idea. :-)