Openhab 2.0 Security Model

Hi,
how is security going to be handled in op2.0?

Still just via username password and a flat login.cfg or are there plans for a bigger role based or even attribute based access control system?

How would i go about implement one?

Please see https://github.com/eclipse/smarthome/issues/579 and https://github.com/eclipse/smarthome/issues/2620.