I have to agree that the security model is horrendous. It's that kind of thing that when you come up with it and program it in your own code, it looks so obviou

I have to agree that the security model is horrendous. It's that kind of thing that when you come up with it and program it in your own code, it looks so obvious and easy to use right? Well... no. The way one configures users and permissions in Mumble clearly didn't pass the mom test. I have similar qualms with how users identify. "What? are you telling me that there are these weird files that are called <certificates> and that if I want to move between my PC, laptop, or phone, I need to hunt for this file and copy it into all my devices?" (obviously at this point people started logging in as "Joe2", "Joe3", etc. in my server)