Discussion point:
Should VMSECURE hold an IDENTITY? If VMSECURE knows it's not in an SSI environment, then IDENTITY and USER are effectively synonymous, so why treat them differently?
Background/Use Case:
By design, an IDENTITY (vs USER) in a file for VMSECURE MULTIPLE HOLD is not held.
We have a process that holds dormant users... it doesn't distinguish between a USER and an IDENTITY. (dormant is an id that has not been logged onto, autologged nor one of its disks linked to in n days)
Ids that are in hold status for x days are then deleted. This provides a nice grace period during which it's trivial to reinstate if needed.