RVP security mechanisms
Every security principal (user, server, etc.) has an X.509v3 Certificate
Connections are SSL-secured (encryption, authentication)
Security can be administered at the method level
- e.g. authentication for NOTIFYs but not for UNSUBSCRIBE
- Security <-> performance tradeoffs can be made by administrators