Priority list as of 0.9.5:

1. Tagged and encrypted attribute support, integrated User-Password encryption
2. Internal module support
3. Proxy module (depends on 1 and 2)
4. Language changes: 
   * for better standards compliance when deciding late to reject: add an 
     operator to clear the reply list of all attributes in space RAD-ATR, 
     except for Proxy-State and Reply-Message
   * harmonize del, delall, F:, REQ: and REP:, := and = into d:, D:, f:, 
     rep:, and n: prefixes and allow them to be used in the ASCII interface as
     well (req: becomes default in language, regardless of operator; n: means
     create new instance, even if one exists; allow explicit req: in ASCII
     interface), giving it more complete access to both lists. The ASCII
     interface may also get a flag to send both lists to the module, prefixing
     the current reply list attributes with 'rep:'.
5. Generic VM state storage to tie in with generic event-driven version of
   the behaviour expression. Instead of having a single entry point (for new
   requests), we'd have an entry point for each 'incoming data' event (new
   request, proxy answer, data from module). Coupled with a generic auto
   garbage collected state storage for VM contexts, keyed on arbitrary strings,
   this can be used to implement and experiment with multi-message 
   authentication types, including challenge-response schemes such as EAP.
6. UIDs: allow a uid to be specified that takes effect after starting the 
   modules; allow each module to use a different UID as well.
7. Package for Debian
8. Better, faster, more flexible logging module (in C and supporting per-entry
   variable paths)
9. PAM, MySQL and/or DBM r/w modules
a. DNS resolver module that returns strs for ips and vice versa
b. MSCHAPv2/MPPE support (using base64, sha1, ntdes operators)
c. EAP, SRP-SHA1 support
d. Perhaps add rule-based language instead of free-form expression;
   look at mod_rewrite's and iptables' faults and benefits.

And of course always:

* Better documentation
* More sample configuration/behaviour combos

