A medium-sized university wants to implement a central sign-on facility where users authenticate themselves to an official site then receive a token that confirms their identity to all other campus sites. (a) Assuming the protocol is competently implemented and deployed, how might deploying this service improve security on campus? (4 marks) (b) Under the same assumptions, how might it hurt security? (4 marks)