Authentication. Excluding SSL, using Blowfish for example, need to solidify protection against DoS attacks. Currently a node will not be recognized by the controller if the heartbeat response does not decrypt correctly. This may be sufficient for the moment, but think long term.