distributed authentification scheme advice needed