A pluggable authentication system that can be extended nearly infinitenly, works decently in PHP<5.3, and takes a granular (method-specific) approach to security.
As it stands now, the module is centered around enabling calls to a given method to require a series of things to happen before it can run.