>We give our web folks a tool that lets them release specific volumes. It >requires that you have a machine somewhere with access to a Kerberos >identity that's in UserList, (...) Add ACLs for volume operations (on a per volume basis where it makes sense) to the "wanted" list. The UserList should be killed and replaced with something better. Harald.