[nix]

The Google Apps case is harder because of the existence of a separate "domain administrator" role with some powers over the user account. Many people on Google Apps domains are employees using their work email for personal business. If you want to create durable identities around email addresses, these people are kind of a problem, because the obvious way to do things gives control of their digital identities to their employer's IT department.