Someone could also utilize Apaches feature to drag the windows-logon into the variables...

Actually I was thinking about this too and thought we could utilize the API for that, so the plugin can read the current URL and look for keys with this URL assigned. The PW would be easy, since most pages use an input type="password" for this so someone could guess that the input before this one in the DOM should be the username (or e-mail)...

If the API would log that as an access to the Element like the user logged in (using the API-key per user) it would be consistent...

I've found some usecases here too for this.

1.) I'm building up TeamPass for 2 companies which work closely together.

Sometimes we need items in one folder linked to another cause both companies use those items.

2.) I've got a Account to a service which is beeing used by 2 independent departments (management and programming)