'connected' flag; do not set until we get "authentication accepted' back from server
Check for module versions; do not run without modules installed
  use a key?  see loader.c in *
State maintenance modules
code formatting
tcpwrappers/access control/connect mask
tls?
better dir structure in source tree
subversion with digium
libtool/autoconf/automake support
SetInputFormat proxyaction?
detect old config file fmt and puke

kill http clients better?
snmp?