I think most of the problems stem from the convention in current SFOS that there is just one "nemo" user account and many system services depend on the user being "nemo" to work correctly.

True multiuser capability should make the device more secure (among other benefits)

I already started to work on separating system priviliges from "nemo" priviliges, to enable multiple user accounts on the device but got a bit sidetracked some time ago so have not really had time to continue with it.

What I'd like to see in the end are following results;

• system startup does not depend on user login at any level
• multiple user accounts that can log-in simultaneously
• all user accounts have their own set of privilige controls
• all system services needing user-related data for operation depend only on data in home of the said user (well, this is kind of obvious, really )
• all installed applications needing user data depend only on data in home of the said user (which actually works like that already)
• all user homes are encrypted by default