> -----Original Message-----
> From: Testbed Support for GridPP member institutes [mailto:TB-
> [log in to unmask]] On Behalf Of Gareth Roy
> b) To run small VO workloads sites are now required to have glExec as the
> pilot can’t guarantee safety without it in a multi-VO environment
I think that's a fair summary, but I would quibble a little with this bit; while they're not identical situations, the pilot can't guarantee safety without glExec in a single-VO case either, there is still a requirement to separate a single VOs users from each other and from that VOs pilot credentials, and that also means that sites will still need glExec, or something else to do the job.
I can't see that there's any way forward where we don't need something that does this, glExec or otherwise.