This is why my idea of federation should move to service discovery. A federation would then be just a node that can points to other node serving similar service/protocol and keep their data separate. No need to copy data between server. Authentication can then be done via oAuth. This also means federation would need to be a 2-way street. Server admin would both have to allow CORS from every domain they federated with and trust the others oAuth secret/public key