sandstorm looks really interesting! Does this provide a global authentication- / rights- / group-management api so all apps could share access rights and user credentials in one database (or ldap store)?
I don't know the current status but these are things that are core to sandstorm. I'd check their discussion board and maybe ask if you want a clear answer. They're a pretty serious bunch.