a few thoughts:

Features:

separate DTP connection timeout and PI timeouts
connection creation limit
pipelining of commands
cred-compatable
Anonymous avatar(linux only)

TODOs:

Needs more extensive unittests 
Need to test security features