Here's below I think will be a good features for the next release
I agree with #1. As for #2, I think this is a good idea, but would probably better be realized by integrating Windows accounts and groups via AD or the local machine. Or, it could work in conjunction with that. Making the permissions much more granular is A-OK in my book.