> "a "high security" option that didn't trust password authentication and couldn't re-give you your secret key" And no way to reset it? What if you have VMs c

> "a "high security" option that didn't trust password authentication and couldn't re-give you your secret key" And no way to reset it? What if you have VMs currently running that need to be stopped ($$)? And if there's a reset then it's the same thing as your point, anyone with your password has access (unless you're thinking email but that's worse than the current https delivery of secret keys IMO). I like the idea in spirit. I also think they would do well with a delegation of rights model (that included limited delegation). Any of these portals (Rightscale etc.) need you to upload your full credentials for anything to work.