I always thought they should morph/change/add circles as a method to do authentication, authorization and enterprise group permissions.

Imagine an Enterprise IT worker creating a Resource Circle called "Salesforce" or "DropBox" and a user group called Marketing.

I would want it to work for inside private resources as well as public resources. Same thing with user groups. Groups of employees, contractors and outsiders.