This call gets a slice name bound to the requesting user. The name is determined by the Naming Authority and is guaranteed to be globally unique. Of course a name is only issued to a user with proper credentials and a fault issued if they are unacceptable. If the allocation is successful, the new slicename is returned. Bind an additional user to this slice. The user credentials and slice name are passed and if either is unacceptable the operation fails with a standard fault message. Otherwise the new name is bound. Remove the given user from the slice. If either the user or slice is unacceptable, a standard fault message is issued. Otherwise the user is removed. A slice without any users bound to it is garbage collected. If we allow this operation, there's a question about who the resource allocations owe their validity to. If it's the user, should the allocations end if the user leaves the slice? Return the user credentials associated with the slice. Right now the same credentails are returned that are used to authenticate the various calls, but this is obviously unacceptable. That will be fixed. Remove the slice from the global name space. This asks a lot of questions. Should the slice be confirmed to be empty before it is removed? If so how might one do that? Forcably shutting down the slice is similarly problematic - only the user(s?) knows for sure what resources are allocated to the slice.