Who and what is right, in a central ID system?