Bob, does the following work for the case you suggested:
2) Access controlled: The Printer object has an associated
Access Control List (ACL). Identification is required, but
authentication (other than perhaps a password) is not.
| Identification may flow with the IPP request or may be
| included as part of the underlying transport. Data is most
likely always sent in the clear. Again this is probably
most suited for environments where Printers are not
accessible from outside of an organization*,s firewall.
However certain printers may be usable only by certain
groups within an organization. This scheme also allows
for accounting to be applied to printing based on user
or group identity.