FileVault has graduated to the big leagues now with the switch to full disk encryption. There have also been some tightening of the rules around the use of institutional master keychains as well and more changes in how to use those master keychains. All of this is seemingly undocumented and confusing.
One of the unpleasant surprises in Lion (for me) was the new look given to iCal and Address Book. What were they thinking?
