Index: fedd/abac-src/ttg/demo/build/disc-ussh.xml
===================================================================
--- fedd/abac-src/ttg/demo/build/disc-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/demo/build/disc-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- edited with XML Spy v4.3 U (http://www.xmlspy.com) by Kangshi (Kangshi) -->
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="file:///var/tomcat4/webapps/demo/WEB-INF/RTMLv1.0q.xsd">
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD02">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+	<Credential id="FakeHashCredential01">
+		<!-- USN.assignedNRet <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USN">
+				<KeyHash>USN</KeyHash>
+			</Principal>
+			<Principal shortName="USSH">
+				<KeyHash>USSH</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USN"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="assignedNRet" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential02">
+		<!-- US.usr <- USSH -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USSH">
+				<KeyHash>USSH</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>US</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="USSH"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential03">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="USEUCOM">
+				<KeyHash>USEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith">
+				<KeyHash>RADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="USEUCOM"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="NRetUSTacCom" domain="s"/>
+			<PrincipalRef shortName="RADMSmith"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential04">
+		<!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="RADMSmith">
+				<KeyHash>RADMSmith</KeyHash>
+			</Principal>
+			<Principal shortName="USN">
+				<KeyHash>USN</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="RADMSmith"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacUsr" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USN"/>
+				<RoleTerm name="assignedNRet" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+	<Credential id="FakeHashCredential05">
+		<!-- US.friendly <- SE -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD02"/>
+			<Principal shortName="SE">
+				<KeyHash>SE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>US</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="US"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="SE"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
+</CredentialStore>
