[chaxor]

It seems that most of these issues are not really a problem if the system is used for a small set of people on LAN only, with VPN if needed elsewhere. Perhaps the browser local storage is an issue, but may be mitigated if the credentials are only useful for that LAN service, with no way for someone to access outside the LAN anyway. Although I'm not a security expert so I may be missing something here.