Federated accounts between servers might be a nice overlay feature set. Servers can just reject mail from any unauthenticated user, and sync user databases periodically.