actually it is possible already to set up certificates and use them for authentication, in firefox you can check this under preferences/advanced/encryption
If all I had to do was grab their public key, I could then do everything behind the scenes (even creating groups so that some people can see some photos and others can't).