summary
no limit on MARKS scalability
- completely decoupled
- esp. if scenario allows stateless key manager replication
- extremely low set up and running costs
- no (reliable) multicast re-keying
arbitrary eviction
- unplanned far more difficult than planned
- cost difference worth business model distortion
- can usefully combine planned & unplanned