We had an intense conversation at lunch as a result of Rich Salz' talk.  I am looking forward to the follow up from Keith Brown.  Essentially, message level security married with Queuing can prevent you from CPU targeted DOS attacks.  And with message based security, you can retain the credential information for A^2 purposes.