Maybe this can be implemented globally into CSecurityManager in some way so other components like CHttpSession or CWebUser can somehow make use of it. At this point I have no idea how a good solution would look like.
I know it’s a low priority feature, but still I want to mention it 
Let me know what you think - thanks.