The Access Control Service uses a new community protocol and format that are now posted on google groups: http://groups.google.com/group/wrap-wg http://groups.google.com/group/oauth-wrap-wg

Check em out. If you are a security geek, it’s worth the read.