This is actually pretty common and I don't think there is a better way to do it. I am surprised you haven't encountered these systems in cloud environments, par

This is actually pretty common and I don't think there is a better way to do it. I am surprised you haven't encountered these systems in cloud environments, particularly where multiple organizations (or just untrusted networks) are involved. Or maybe I'm misunderstanding your criticism.