I'd like to agree, but I think you overestimate the sanity of many Enterprise IT designs... It certainly would be helpful if there was a single point to handle

I'd like to agree, but I think you overestimate the sanity of many Enterprise IT designs... It certainly would be helpful if there was a single point to handle the device-level authorizations, but again, many existing systems aren't necessarily designed to play well with others.