Index: fedd/abac-src/ttg/test/rtml/sadmir/CVS/Entries
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/CVS/Entries	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,10 @@
+/adsd.xml/1.1/Fri Mar 21 01:38:20 2003//
+/credential01.xml/1.1/Fri Mar 21 01:38:21 2003//
+/credential02.xml/1.1/Fri Mar 21 01:38:21 2003//
+/credential03.xml/1.1/Fri Mar 21 01:38:21 2003//
+/credential04.xml/1.1/Fri Mar 21 01:38:21 2003//
+/credential05.xml/1.1/Fri Mar 21 01:38:21 2003//
+/sadmir.jks/1.1/Tue Mar 25 19:49:31 2003//
+/sign/1.1/Fri Mar 21 01:50:20 2003//
+/signed-sadmir.xml/1.1/Fri Mar 21 18:01:40 2003//
+D
Index: fedd/abac-src/ttg/test/rtml/sadmir/CVS/Repository
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/CVS/Repository	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+ttg/test/rtml/sadmir
Index: fedd/abac-src/ttg/test/rtml/sadmir/CVS/Root
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/CVS/Root	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,1 @@
+:ext:jjacobs@src.columbia.sparta.com/cvs/abac
Index: fedd/abac-src/ttg/test/rtml/sadmir/adsd.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/adsd.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/adsd.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<ApplicationDomainSpecification uri="" id="FakeHashADSD01">
+		<RoleDeclaration name="friendly">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom">
+			<Plain issuerTraces="def" subjectTraces="none"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet">
+			<Plain issuerTraces="none" subjectTraces="all"/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr">
+			<Plain issuerTraces="all" subjectTraces="none"/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
Index: fedd/abac-src/ttg/test/rtml/sadmir/credential01.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/credential01.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/credential01.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<Credential id="FakeHashCredential01">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="usr" domain="s"/>
+			<PrincipalRef shortName="SAdmir"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
Index: fedd/abac-src/ttg/test/rtml/sadmir/credential02.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/credential02.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/credential02.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<Credential id="FakeHashCredential02">
+		<!-- SE.friendly <- US -->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US">
+				<KeyHash>FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SE"/>
+		</Issuer>
+		<SimpleMember>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<PrincipalRef shortName="US"/>
+		</SimpleMember>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
Index: fedd/abac-src/ttg/test/rtml/sadmir/credential03.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/credential03.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/credential03.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<Credential id="FakeHashCredential03">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<LinkedContainment>
+			<HeadRoleTerm name="needsSLocs" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="NRetTacCom" domain="s"/>
+				<RoleTerm name="NRetTacUsr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
Index: fedd/abac-src/ttg/test/rtml/sadmir/credential04.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/credential04.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/credential04.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<Credential id="FakeHashCredential04">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM">
+				<KeyHash>FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="NRetTacCom" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="USEUCOM"/>
+				<RoleTerm name="NRetUSTacCom" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
Index: fedd/abac-src/ttg/test/rtml/sadmir/credential05.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/credential05.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/credential05.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+	<Credential id="FakeHashCredential05">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble>
+			<ImportDomain name="s" idref="FakeHashADSD01"/>
+			<Principal shortName="SE">
+				<KeyHash>FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir">
+				<KeyHash>FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer>
+			<PrincipalRef shortName="SAdmir"/>
+		</Issuer>
+		<SimpleContainment>
+			<HeadRoleTerm name="friendly" domain="s"/>
+			<ExternalRole>
+				<PrincipalRef shortName="SE"/>
+				<RoleTerm name="friendly" domain="s"/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment>
+			<HeadRoleTerm name="friendlyUsr" domain="s"/>
+			<LinkedRole>
+				<RoleTerm name="friendly" domain="s"/>
+				<RoleTerm name="usr" domain="s"/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment>
+			<HeadRoleTerm name="getsSLocs" domain="s"/>
+			<Intersection>
+				<RoleTerm name="friendlyUsr" domain="s"/>
+				<RoleTerm name="needsSLocs" domain="s"/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime>
+			<IssueTime>2002-09-01T13:20:00</IssueTime>
+			<NotAfter>2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	</Credential>
Index: fedd/abac-src/ttg/test/rtml/sadmir/sign
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/sign	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/sign	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,20 @@
+#!/bin/tcsh
+java com.nailabs.abac.credential.SignDomain\
+	-i nato-adsd.xml -o signed-adsd.xml \
+	-k keystore.jks -a SAdmir -c -p secure
+java com.nailabs.abac.credential.SignCredential \
+	-i credential01.xml -o signed-credential01.xml \
+	-k keystore.jks -a -SAdmir c -p secure
+java com.nailabs.abac.credential.SignCredential \
+	-i credential02.xml -o signed-credential02.xml \
+	-k keystore.jks -a SAdmir -c -p secure
+java com.nailabs.abac.credential.SignCredential \
+	-i credential03.xml -o signed-credential03.xml \
+	-k keystore.jks -a SAdmir -c -p secure
+java com.nailabs.abac.credential.SignCredential \
+	-i credential04.xml -o signed-credential04.xml \
+	-k keystore.jks -a SAdmir -c -p secure
+java com.nailabs.abac.credential.SignCredential \
+	-i credential05.xml -o signed-credential05.xml \
+	-k keystore.jks -a SAdmir -c -p secure
+cat signed-adsd.xml signed-credential*.xml > signed-sadmir.xml
Index: fedd/abac-src/ttg/test/rtml/sadmir/signed-sadmir.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/sadmir/signed-sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/sadmir/signed-sadmir.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,300 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  file:///home/jay/rtml/schemas/RTMLv1.0q.xsd">
+<ApplicationDomainSpecification id="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" uri="" xmlns="">
+		<RoleDeclaration name="friendly" xmlns="">
+			<Plain issuerTraces="all" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs" xmlns="">
+			<Plain issuerTraces="def" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="needsSLocs" xmlns="">
+			<Plain issuerTraces="def" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom" xmlns="">
+			<Plain issuerTraces="def" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr" xmlns="">
+			<Plain issuerTraces="all" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+	</ApplicationDomainSpecification>
+<Credential id="FakeHashCredential01" xmlns="">
+		<!-- SE.usr <- SAdmir-->
+		<Preamble xmlns="">
+			<ImportDomain idref="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" name="s" xmlns=""/>
+			<Principal shortName="SE" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="SE" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="usr" xmlns=""/>
+			<PrincipalRef shortName="SAdmir" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">KqUXqdo2C3vP78v3z/xKHy+5aglT32wcVeTrM1vSWrojoiriTD3AUA==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:KeyValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:DSAKeyValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:P xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+/X9TgR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuA
+HTRv8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOu
+K2HXKu/yIgMZndFIAcc=
+</ds:P>
+<ds:Q xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">l2BQjxUjC8yykrmCouuEC/BYHPU=</ds:Q>
+<ds:G xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3
+zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKL
+Zl6Ae1UlZAFMO/7PSSo=
+</ds:G>
+<ds:Y xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+xF4Uj48pEzhT/4LE4/9Q44HPLsxaeR7odfq2R9jVYiF0gb6fTgWXM7RKzVbTUts8NSi/4cnDtqZg
+k3ijmv5w9VyiRFqqHSXnGdIJbZJu5TExCE6Be5AEO6JODgGDZQeO1mUTtpiiBIeqJtITBNcBSzrN
+TO5FpSka90qZybyBAMA=
+</ds:Y>
+</ds:DSAKeyValue>
+</ds:KeyValue>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential02" xmlns="">
+		<!-- SE.friendly <- US -->
+		<Preamble xmlns="">
+			<ImportDomain idref="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" name="s" xmlns=""/>
+			<Principal shortName="SE" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="SE" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="friendly" xmlns=""/>
+			<PrincipalRef shortName="US" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">bxa2gtJDgTL5pwndn60Pu8lZqDsOVQnrgdFyzq7bRI39g4GkoliOBA==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC9zCCArUCBD57PNcwCwYHKoZIzjgEAwUAMGExCzAJBgNVBAYTAlNFMQswCQYDVQQIEwJTRTEQ
+MA4GA1UEBxMHVW5rbm93bjEQMA4GA1UEChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEPMA0G
+A1UEAxMGU0FkbWlyMB4XDTAzMDMyMTE2MjQ1NVoXDTAzMDYxOTE2MjQ1NVowYTELMAkGA1UEBhMC
+U0UxCzAJBgNVBAgTAlNFMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYD
+VQQLEwdVbmtub3duMQ8wDQYDVQQDEwZTQWRtaXIwggG4MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9T
+gR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv
+8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOuK2HX
+Ku/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps93su8q1w2uFe5eZSv
+u/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgWE7fPCTKMyKbhPBZ6i1R8jSjgo64e
+K7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQiaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhQAC
+gYEAxF4Uj48pEzhT/4LE4/9Q44HPLsxaeR7odfq2R9jVYiF0gb6fTgWXM7RKzVbTUts8NSi/4cnD
+tqZgk3ijmv5w9VyiRFqqHSXnGdIJbZJu5TExCE6Be5AEO6JODgGDZQeO1mUTtpiiBIeqJtITBNcB
+SzrNTO5FpSka90qZybyBAMAwCwYHKoZIzjgEAwUAAy8AMCwCFAz1M+ewS4FufoLqCaBFGu1Pyyyo
+AhRgjQMie0z1Ol5OFNYltYRTwFiB1Q==
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential03" xmlns="">
+		<!-- SAdmir.needsSLocs <- Sadmir.NRetTacCom.NRetTacUsr-->
+		<Preamble xmlns="">
+			<ImportDomain idref="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" name="s" xmlns=""/>
+			<Principal shortName="SAdmir" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="SAdmir" xmlns=""/>
+		</Issuer>
+		<LinkedContainment xmlns="">
+			<HeadRoleTerm domain="s" name="needsSLocs" xmlns=""/>
+			<LinkedRole xmlns="">
+				<RoleTerm domain="s" name="NRetTacCom" xmlns=""/>
+				<RoleTerm domain="s" name="NRetTacUsr" xmlns=""/>
+			</LinkedRole>
+		</LinkedContainment>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">i2r4gPDziHjwFuD+/pT/jUXkAz+AYLaq6ixL40Xc1NwiAEWxfqIaSA==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC9zCCArUCBD57PNcwCwYHKoZIzjgEAwUAMGExCzAJBgNVBAYTAlNFMQswCQYDVQQIEwJTRTEQ
+MA4GA1UEBxMHVW5rbm93bjEQMA4GA1UEChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEPMA0G
+A1UEAxMGU0FkbWlyMB4XDTAzMDMyMTE2MjQ1NVoXDTAzMDYxOTE2MjQ1NVowYTELMAkGA1UEBhMC
+U0UxCzAJBgNVBAgTAlNFMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYD
+VQQLEwdVbmtub3duMQ8wDQYDVQQDEwZTQWRtaXIwggG4MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9T
+gR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv
+8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOuK2HX
+Ku/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps93su8q1w2uFe5eZSv
+u/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgWE7fPCTKMyKbhPBZ6i1R8jSjgo64e
+K7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQiaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhQAC
+gYEAxF4Uj48pEzhT/4LE4/9Q44HPLsxaeR7odfq2R9jVYiF0gb6fTgWXM7RKzVbTUts8NSi/4cnD
+tqZgk3ijmv5w9VyiRFqqHSXnGdIJbZJu5TExCE6Be5AEO6JODgGDZQeO1mUTtpiiBIeqJtITBNcB
+SzrNTO5FpSka90qZybyBAMAwCwYHKoZIzjgEAwUAAy8AMCwCFAz1M+ewS4FufoLqCaBFGu1Pyyyo
+AhRgjQMie0z1Ol5OFNYltYRTwFiB1Q==
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential04" xmlns="">
+		<!-- SAdmir.NRetTacCom <- USEUCOM.NRetUSTacCom-->
+		<Preamble xmlns="">
+			<ImportDomain idref="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" name="s" xmlns=""/>
+			<Principal shortName="SAdmir" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySAdmir</KeyHash>
+			</Principal>
+			<Principal shortName="USEUCOM" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="SAdmir" xmlns=""/>
+		</Issuer>
+		<SimpleContainment xmlns="">
+			<HeadRoleTerm domain="s" name="NRetTacCom" xmlns=""/>
+			<ExternalRole xmlns="">
+				<PrincipalRef shortName="USEUCOM" xmlns=""/>
+				<RoleTerm domain="s" name="NRetUSTacCom" xmlns=""/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">UH/izCjRteS3ag9fydzC+K8dGmMR+tUEEEnvqyMI7ZVALCRyHwSnIw==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC9zCCArUCBD57PNcwCwYHKoZIzjgEAwUAMGExCzAJBgNVBAYTAlNFMQswCQYDVQQIEwJTRTEQ
+MA4GA1UEBxMHVW5rbm93bjEQMA4GA1UEChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEPMA0G
+A1UEAxMGU0FkbWlyMB4XDTAzMDMyMTE2MjQ1NVoXDTAzMDYxOTE2MjQ1NVowYTELMAkGA1UEBhMC
+U0UxCzAJBgNVBAgTAlNFMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYD
+VQQLEwdVbmtub3duMQ8wDQYDVQQDEwZTQWRtaXIwggG4MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9T
+gR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv
+8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOuK2HX
+Ku/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps93su8q1w2uFe5eZSv
+u/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgWE7fPCTKMyKbhPBZ6i1R8jSjgo64e
+K7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQiaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhQAC
+gYEAxF4Uj48pEzhT/4LE4/9Q44HPLsxaeR7odfq2R9jVYiF0gb6fTgWXM7RKzVbTUts8NSi/4cnD
+tqZgk3ijmv5w9VyiRFqqHSXnGdIJbZJu5TExCE6Be5AEO6JODgGDZQeO1mUTtpiiBIeqJtITBNcB
+SzrNTO5FpSka90qZybyBAMAwCwYHKoZIzjgEAwUAAy8AMCwCFAz1M+ewS4FufoLqCaBFGu1Pyyyo
+AhRgjQMie0z1Ol5OFNYltYRTwFiB1Q==
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential05" xmlns="">
+		<!-- SAdmir.getsSLocs <- SE.friendly.usr ^ SAdmir.needsSLocs-->
+		<Preamble xmlns="">
+			<ImportDomain idref="bXzD+txgDphZ1Zukl3Vz1LcfCZc=" name="s" xmlns=""/>
+			<Principal shortName="SE" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="SAdmir" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySAdmir</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="SAdmir" xmlns=""/>
+		</Issuer>
+		<SimpleContainment xmlns="">
+			<HeadRoleTerm domain="s" name="friendly" xmlns=""/>
+			<ExternalRole xmlns="">
+				<PrincipalRef shortName="SE" xmlns=""/>
+				<RoleTerm domain="s" name="friendly" xmlns=""/>
+			</ExternalRole>
+		</SimpleContainment>
+		<LinkedContainment xmlns="">
+			<HeadRoleTerm domain="s" name="friendlyUsr" xmlns=""/>
+			<LinkedRole xmlns="">
+				<RoleTerm domain="s" name="friendly" xmlns=""/>
+				<RoleTerm domain="s" name="usr" xmlns=""/>
+			</LinkedRole>
+		</LinkedContainment>
+		<IntersectionContainment xmlns="">
+			<HeadRoleTerm domain="s" name="getsSLocs" xmlns=""/>
+			<Intersection xmlns="">
+				<RoleTerm domain="s" name="friendlyUsr" xmlns=""/>
+				<RoleTerm domain="s" name="needsSLocs" xmlns=""/>
+			</Intersection>
+		</IntersectionContainment>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2003-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">OtgP4UOC/9cVGETcYVvLfOXQuZo2atbXnIu832PXBjpF8kbfvfizIg==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC9zCCArUCBD57PNcwCwYHKoZIzjgEAwUAMGExCzAJBgNVBAYTAlNFMQswCQYDVQQIEwJTRTEQ
+MA4GA1UEBxMHVW5rbm93bjEQMA4GA1UEChMHVW5rbm93bjEQMA4GA1UECxMHVW5rbm93bjEPMA0G
+A1UEAxMGU0FkbWlyMB4XDTAzMDMyMTE2MjQ1NVoXDTAzMDYxOTE2MjQ1NVowYTELMAkGA1UEBhMC
+U0UxCzAJBgNVBAgTAlNFMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYD
+VQQLEwdVbmtub3duMQ8wDQYDVQQDEwZTQWRtaXIwggG4MIIBLAYHKoZIzjgEATCCAR8CgYEA/X9T
+gR11EilS30qcLuzk5/YRt1I870QAwx4/gLZRJmlFXUAiUftZPY1Y+r/F9bow9subVWzXgTuAHTRv
+8mZgt2uZUKWkn5/oBHsQIsJPu6nX/rfGG/g7V+fGqKYVDwT7g/bTxR7DAjVUE1oWkTL2dfOuK2HX
+Ku/yIgMZndFIAccCFQCXYFCPFSMLzLKSuYKi64QL8Fgc9QKBgQD34aCF1ps93su8q1w2uFe5eZSv
+u/o66oL5V0wLPQeCZ1FZV4661FlP5nEHEIGAtEkWcSPoTCgWE7fPCTKMyKbhPBZ6i1R8jSjgo64e
+K7OmdZFuo38L+iE1YvH7YnoBJDvMpPG+qFGQiaiD3+Fa5Z8GkotmXoB7VSVkAUw7/s9JKgOBhQAC
+gYEAxF4Uj48pEzhT/4LE4/9Q44HPLsxaeR7odfq2R9jVYiF0gb6fTgWXM7RKzVbTUts8NSi/4cnD
+tqZgk3ijmv5w9VyiRFqqHSXnGdIJbZJu5TExCE6Be5AEO6JODgGDZQeO1mUTtpiiBIeqJtITBNcB
+SzrNTO5FpSka90qZybyBAMAwCwYHKoZIzjgEAwUAAy8AMCwCFAz1M+ewS4FufoLqCaBFGu1Pyyyo
+AhRgjQMie0z1Ol5OFNYltYRTwFiB1Q==
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+</CredentialStore>
