diff --git a/_service b/_service
index f0e4a1d..927747c 100644
--- a/_service
+++ b/_service
@@ -3,7 +3,7 @@
     <param name="url">https://github.com/kanidm/kanidm.git</param>
     <param name="versionformat">@PARENT_TAG@~git@TAG_OFFSET@.%h</param>
     <param name="scm">git</param>
-    <param name="revision">1.1.0-beta.13</param>
+    <param name="revision">1.1.0-rc.15</param>
     <param name="match-tag">v*</param>
     <param name="versionrewrite-pattern">v(\d+\.\d+\.\d+)-([a-z]+)\.(\d+)</param>
     <param name="versionrewrite-replacement">\1~\2\3</param>
@@ -19,10 +19,10 @@
   <service name="cargo_vendor" mode="disabled">
      <param name="srctar">kanidm-*.tar.zst</param>
      <param name="compression">zst</param>
-     <param name="update">false</param>
+     <param name="i-accept-the-risk">RUSTSEC-2022-0040</param>
+     <param name="update">true</param>
   </service>
   <service name="cargo_audit" mode="disabled">
-     <param name="srcdir">kanidm</param>
   </service>
 </services>
 
diff --git a/_servicedata b/_servicedata
index fff89be..51e30bb 100644
--- a/_servicedata
+++ b/_servicedata
@@ -1,4 +1,4 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/kanidm/kanidm.git</param>
-              <param name="changesrevision">1fb34a91e36d022b70590dc43a19b548cdf42cb4</param></service></servicedata>
\ No newline at end of file
+              <param name="changesrevision">74f5c0f0f118ad863da786ba610175de606126a7</param></service></servicedata>
\ No newline at end of file
diff --git a/cargo_config b/cargo_config
index 6fb4ff4..0feb7bb 100644
--- a/cargo_config
+++ b/cargo_config
@@ -1,5 +1,15 @@
 [source.crates-io]
 replace-with = "vendored-sources"
 
+[source."git+https://github.com/dnaeon/rust-sshkeys.git?rev=fa5bd02dd6e90ee724fdb981253c1e7726a7f534"]
+git = "https://github.com/dnaeon/rust-sshkeys.git"
+rev = "fa5bd02dd6e90ee724fdb981253c1e7726a7f534"
+replace-with = "vendored-sources"
+
+[source."git+https://github.com/kanidm/webauthn-rs.git?rev=2218d2055c0c900ef57b398423eee5e8d5521f4c"]
+git = "https://github.com/kanidm/webauthn-rs.git"
+rev = "2218d2055c0c900ef57b398423eee5e8d5521f4c"
+replace-with = "vendored-sources"
+
 [source.vendored-sources]
-directory = "vendor"
\ No newline at end of file
+directory = "vendor"
diff --git a/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst b/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst
deleted file mode 100644
index 9491c55..0000000
--- a/kanidm-1.1.0~beta13~git7.1fb34a9.tar.zst
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:52474cf75d8bf2f8cca1d8973848274a48ef7e6d663eef1905ca64231d7a52d5
-size 6383692
diff --git a/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst b/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst
new file mode 100644
index 0000000..955606a
--- /dev/null
+++ b/kanidm-1.1.0~rc15~git2.74f5c0f.tar.zst
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:5a0f1eb178a222cb2eaaeff2dead0a5bc0bcf8f24c213238fb31333b785b370d
+size 10001905
diff --git a/kanidm.changes b/kanidm.changes
index 2df486f..ab92ebb 100644
--- a/kanidm.changes
+++ b/kanidm.changes
@@ -1,3 +1,251 @@
+-------------------------------------------------------------------
+Tue Oct 31 12:02:37 UTC 2023 - william.brown@suse.com
+
+- Update to version 1.1.0~rc15~git2.74f5c0f:
+  * make versions consistent
+  * 1.1.0 rc.15 dev post-release (#2271)
+  * Release 1.1.0-rc.15-dev
+  * started writing docs and ended up in another rabbit hole (#2267)
+  * CLI integration test beginnings (#2261)
+  * chore(deps): bump the all group with 7 updates (#2266)
+  * chore(deps-dev): bump the all group in /pykanidm with 5 updates (#2265)
+  * Add book chapter + cli
+  * Cargo fmt and clippy checks
+  * Restrict posix passwords on ldap bind with config
+  * Splitting the SPAs (#2219)
+  * Bug chasing (#2257)
+  * cargo fmt + clippy (#2241)
+  * service-account or person validity show returns for non-existing identity (#2258)
+  * don't need write if we are not writing (#2256)
+  * adding service account patch methods (#2255)
+  * .deb package build and docs fixes (#2252)
+  * Auth flow docs (#2249)
+  * pykanidm test code (#2202)
+  * chore(deps): bump the all group with 5 updates (#2247)
+  * chore(deps-dev): bump the all group in /pykanidm with 4 updates (#2246)
+  * 20231019 1122 account policy basics (#2245)
+  * Add note on snaps to PAM and nsswitch with link to new section in FAQ (#2244)
+  * 20231014 account policy (#2218)
+  * chore(deps): bump rustix from 0.38.15 to 0.38.19 (#2242)
+  * Fix incorrect references to LDAP in sync (#2239)
+  * Remove unused crate users (#2240)
+  * chore(deps-dev): bump urllib3 from 2.0.6 to 2.0.7 in /pykanidm (#2238)
+  * Windows build fixes and test coverage (#2220)
+  * more space checks (#2234)
+  * Fixing dependabot and its mistakes (#2232)
+  * chore(deps-dev): bump mypy from 1.5.1 to 1.6.0 in /pykanidm (#2231)
+  * chore(deps-dev): bump mkdocs-material from 9.4.4 to 9.4.6 in /pykanidm (#2230)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2229)
+  * chore(deps): bump tokio from 1.32.0 to 1.33.0 (#2228)
+  * chore(deps): bump tss-esapi from 7.3.0 to 7.4.0 (#2227)
+  * chore(deps): bump regex from 1.9.6 to 1.10.1 (#2226)
+  * chore(deps): bump tracing from 0.1.37 to 0.1.39 (#2225)
+  * chore(deps): bump utoipa-swagger-ui from 3.1.5 to 4.0.0 (#2224)
+  * chore(deps): bump proc-macro2 from 1.0.68 to 1.0.69 (#2223)
+  * chore(deps): bump async-trait from 0.1.73 to 0.1.74 (#2222)
+  * chore(deps): bump serde from 1.0.188 to 1.0.189 (#2221)
+  * OpenAPI/swagger docs autogen (#2175)
+  * 20231012 346 name deny list (#2214)
+  * Add file diagnosis (#2210)
+  * fix RUV on startup, improve filter output (#2211)
+  * Chasing yaks down dark alleyways (#2207)
+  * Reduce `pam_kanidm`'s priority in Debian platforms (#2209)
+  * chore(deps-dev): bump ruff from 0.0.291 to 0.0.292 in /pykanidm (#2194)
+  * chore(deps-dev): bump coverage from 7.3.1 to 7.3.2 in /pykanidm (#2195)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2193)
+  * chore(deps-dev): bump mkdocs-material from 9.4.2 to 9.4.4 in /pykanidm (#2197)
+  * chore(deps): bump libc from 0.2.148 to 0.2.149 (#2201)
+  * chore(deps): bump axum-auth from 0.4.0 to 0.4.1 (#2200)
+  * chore(deps): bump syn from 2.0.37 to 2.0.38 (#2199)
+  * chore(deps): bump proc-macro2 from 1.0.67 to 1.0.68 (#2198)
+  * chore(deps): bump aiohttp from 3.8.5 to 3.8.6 in /pykanidm (#2196)
+  * chore(deps-dev): bump pylint-pydantic from 0.2.4 to 0.3.0 in /pykanidm (#2192)
+  * 20231008 remove expect used (#2191)
+  * Thread naming and display (#2190)
+  * Replication tweaks - try the most recent successful one and error less (#2189)
+  * Chasing wooly quadrapeds again (#2163)
+  * 68 20230929 replication finalisation (#2160)
+  * In-system image storage (#2112)
+  * chore(deps-dev): bump urllib3 from 2.0.4 to 2.0.6 in /pykanidm (#2173)
+  * chore(deps-dev): bump mkdocs-material from 9.3.2 to 9.4.2 in /pykanidm (#2165)
+  * chore(deps): bump clap_complete from 4.4.1 to 4.4.3 (#2170)
+  * chore(deps): bump hashbrown from 0.14.0 to 0.14.1 (#2169)
+  * chore(deps): bump clap from 4.4.4 to 4.4.6 (#2168)
+  * chore(deps): bump regex from 1.9.5 to 1.9.6 (#2167)
+  * chore(deps): bump pydantic from 2.3.0 to 2.4.2 in /pykanidm (#2166)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2164)
+  * fix credential update intent defaults (#2162)
+  * 68 20230919 replication configuration (#2131)
+  * Can't build kanidmd using the Ubuntu docker builder scripts - cleanup (#2154)
+  * Enforce TLS key size minimums (#2145)
+  * bindaddress default doesn't match documentation (#2150)
+  * chore(deps-dev): bump ruff from 0.0.290 to 0.0.291 in /pykanidm (#2137)
+  * chore(deps-dev): bump mkdocs from 1.5.2 to 1.5.3 in /pykanidm (#2138)
+  * chore(deps): bump syn from 2.0.32 to 2.0.37 (#2143)
+  * chore(deps): bump tss-esapi from 7.2.0 to 7.3.0 (#2142)
+  * chore(deps): bump tokio-util from 0.7.8 to 0.7.9 (#2141)
+  * chore(deps): bump dyn-clone from 1.0.13 to 1.0.14 (#2140)
+  * chore(deps): bump clap from 4.4.3 to 4.4.4 (#2139)
+  * chore(deps-dev): bump mkdocs-material from 9.3.1 to 9.3.2 in /pykanidm (#2136)
+  * minor changes to speed up WASM tests (#2133)
+  * chore(deps): bump cryptography from 41.0.3 to 41.0.4 in /pykanidm (#2134)
+  * CLI and kanidm_client changes to handle errors and TLS validation changes (#2127)
+  * Typo (#2125)
+  * chore(deps-dev): bump mkdocs-material from 9.2.8 to 9.3.1 in /pykanidm (#2114)
+  * chore(deps-dev): bump ruff from 0.0.287 to 0.0.290 in /pykanidm (#2115)
+  * chore(deps-dev): bump black from 23.9.0 to 23.9.1 in /pykanidm (#2116)
+  * chore(deps): bump chrono from 0.4.30 to 0.4.31 (#2124)
+  * chore(deps): bump docker/setup-qemu-action from 2 to 3 (#2119)
+  * chore(deps): bump proc-macro2 from 1.0.66 to 1.0.67 (#2123)
+  * chore(deps): bump serde_json from 1.0.106 to 1.0.107 (#2122)
+  * chore(deps): bump libc from 0.2.147 to 0.2.148 (#2121)
+  * chore(deps): bump clap from 4.4.2 to 4.4.3 (#2120)
+  * chore(deps): bump docker/build-push-action from 4 to 5 (#2118)
+  * chore(deps): bump docker/setup-buildx-action from 2 to 3 (#2117)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2113)
+  * Yaleman/issue989 (#2111)
+  * Cinco de yakko (#2108)
+  * 68 20230912 session consistency (#2110)
+  * Fix typo (#2109)
+  * Implement DeviceAuthorizationGrant for MFA (#2079)
+  * Schema dooby doo ... yon (#2103)
+  * sqlite3 doesn't need to be installed on dev machines (#2104)
+  * 68 20230908 replication attrunique (#2086)
+  * chore(deps-dev): bump pytest-aiohttp from 1.0.4 to 1.0.5 in /pykanidm (#2092)
+  * chore(deps-dev): bump coverage from 7.3.0 to 7.3.1 in /pykanidm (#2089)
+  * chore(deps-dev): bump mkdocs-material from 9.2.7 to 9.2.8 in /pykanidm (#2090)
+  * chore(deps-dev): bump black from 23.7.0 to 23.9.0 in /pykanidm (#2088)
+  * chore(deps-dev): bump pytest from 7.4.1 to 7.4.2 in /pykanidm (#2091)
+  * chore(deps): bump actions/checkout from 3 to 4 (#2102)
+  * chore(deps): bump walkdir from 2.3.3 to 2.4.0 (#2101)
+  * chore(deps): bump serde_json from 1.0.105 to 1.0.106 (#2100)
+  * chore(deps): bump openssl-sys from 0.9.92 to 0.9.93 (#2099)
+  * chore(deps): bump bytes from 1.4.0 to 1.5.0 (#2097)
+  * chore(deps): bump clap_complete from 4.4.0 to 4.4.1 (#2098)
+  * chore(deps): bump argon2 from 0.5.1 to 0.5.2 (#2096)
+  * chore(deps): bump syn from 2.0.31 to 2.0.32 (#2095)
+  * chore(deps): bump chrono from 0.4.28 to 0.4.30 (#2094)
+  * chore(deps): bump base64 from 0.21.3 to 0.21.4 (#2093)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2087)
+  * move from git2 to gix (#2085)
+  * Schema-dooby-doo-part-trois (#2082)
+  * CLI and test things (#2080)
+  * 68 20230907 replication (#2081)
+  * minor tweaks to Orca (#2077)
+  * Changing build targets for debs (#2076)
+  * Removing default features from git2 package (#2078)
+  * 68 20230829 replication referential integrity (#2048)
+  * Schema dooby doo part two (#2071)
+  * 68 20230831 design replication coordinator (#2051)
+  * improve wording of webauthn cli interaction (#2073)
+  * When an empty body was returned, do request would error incorrectly (#2074)
+  * update bug template, closes #2054 (#2055)
+  * Yak hassling (#2059)
+  * docs: api tokens are managed by idm_admin (#2072)
+  * chore(deps-dev): bump pytest from 7.4.0 to 7.4.1 in /pykanidm (#2062)
+  * chore(deps-dev): bump mkdocstrings from 0.22.0 to 0.23.0 in /pykanidm (#2063)
+  * chore(deps-dev): bump ruff from 0.0.286 to 0.0.287 in /pykanidm (#2061)
+  * chore(deps): bump async-recursion from 1.0.4 to 1.0.5 (#2070)
+  * chore(deps): bump syn from 2.0.29 to 2.0.31 (#2069)
+  * chore(deps): bump clap from 4.4.0 to 4.4.2 (#2068)
+  * chore(deps): bump url from 2.4.0 to 2.4.1 (#2067)
+  * chore(deps): bump regex from 1.9.4 to 1.9.5 (#2066)
+  * chore(deps): bump chrono from 0.4.26 to 0.4.28 (#2065)
+  * chore(deps): bump tower-http from 0.4.3 to 0.4.4 (#2064)
+  * chore(deps-dev): bump mkdocs-material from 9.2.5 to 9.2.7 in /pykanidm (#2060)
+  * Check in missing users crate for SELinux integration (#2050)
+  * Add tests for X-Forwarded-For header (kinda) (#1957)
+  * docs: fix miniflux oauth example (#2046)
+  * Clear cache before verify on some low-level tests (#2044)
+  * 68 20230828 replication of schema (#2045)
+  * Update compact jwt (#2043)
+  * Allow patching of crates from related projects (#2042)
+  * pam multistep auth state machine (#2022)
+  * chore(deps): bump clap from 4.3.23 to 4.4.0 (#2039)
+  * chore(deps): bump reqwest from 0.11.18 to 0.11.20 (#2040)
+  * chore(deps): bump openssl from 0.10.56 to 0.10.57 (#2038)
+  * chore(deps): bump clap_complete from 4.3.2 to 4.4.0 (#2036)
+  * chore(deps): bump base64 from 0.21.2 to 0.21.3 (#2037)
+  * chore(deps): bump regex from 1.9.3 to 1.9.4 (#2035)
+  * chore(deps): bump serde from 1.0.183 to 1.0.188 (#2034)
+  * chore(deps): bump openssl-sys from 0.9.91 to 0.9.92 (#2033)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2032)
+  * chore(deps-dev): bump mkdocs-material from 9.1.21 to 9.2.5 in /pykanidm (#2031)
+  * chore(deps-dev): bump ruff from 0.0.285 to 0.0.286 in /pykanidm (#2030)
+  * chore(deps): bump pydantic from 2.2.1 to 2.3.0 in /pykanidm (#2029)
+  * Authentication shortcut to get a RW session (#1993)
+  * wopsies, missing imports (#2023)
+  * idv cli (#2001)
+  * Trying to fix the (current) container build failures (#2021)
+  * pykanidm updoots (#2019)
+  * 68 20230821 replication (#2020)
+  * Configurable session timeouts (#1965)
+  * fix: output an array in json mode for `kanidm group list` (#2016)
+  * feat: add json output modes for `person list` and `system oauth2 list` (#2017)
+  * docs: Update missed add_members command (#2018)
+  * Less human strings more enums (#1989)
+  * Resolve incorrect time units on timeout (#2014)
+  * chore(deps): bump dyn-clone from 1.0.12 to 1.0.13 (#2013)
+  * chore(deps): bump quote from 1.0.32 to 1.0.33 (#2012)
+  * chore(deps): bump gloo-timers from 0.2.6 to 0.3.0 (#2011)
+  * chore(deps): bump serde_with from 3.2.0 to 3.3.0 (#2010)
+  * chore(deps): bump clap from 4.3.21 to 4.3.23 (#2009)
+  * chore(deps): bump tokio from 1.31.0 to 1.32.0 (#2008)
+  * chore(deps): bump serde_json from 1.0.104 to 1.0.105 (#2007)
+  * chore(deps): bump syn from 2.0.28 to 2.0.29 (#2006)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#2005)
+  * chore(deps-dev): bump mypy from 1.5.0 to 1.5.1 in /pykanidm (#2004)
+  * chore(deps-dev): bump ruff from 0.0.284 to 0.0.285 in /pykanidm (#2003)
+  * chore(deps): bump pydantic from 2.1.1 to 2.2.1 in /pykanidm (#2002)
+  * reordering layers so the web server works in non-debug-mode (#1999)
+  * 20230817 idv migration (#1992)
+  * daemon: kanidmd version requires a config file to run (#1959) (#1990)
+  * Resolve issues with dyngroup members (#1986)
+  * Revert "sqlite where IN for id entry (#1988)" (#1991)
+  * sqlite where IN for id entry (#1988)
+  * Identity verification feature (#1819)
+  * 1982 service account access (#1985)
+  * Fixing test release (#1983)
+  * error handling and web server logging fixes (#1960)
+  * Struct-ifying schema things (#1971)
+  * Orca tweaks (#1963)
+  * Fighting with zypper, tagging our images (#1964)
+  * chore(deps-dev): bump coverage from 7.2.7 to 7.3.0 in /pykanidm (#1974)
+  * chore(deps-dev): bump mypy from 1.4.1 to 1.5.0 in /pykanidm (#1973)
+  * chore(deps): bump serde from 1.0.182 to 1.0.183 (#1979)
+  * Are we JSON yet? Kinda. But we're closer. (#1967)
+  * chore(deps): bump clap from 4.3.19 to 4.3.21 (#1978)
+  * chore(deps): bump tokio from 1.29.1 to 1.31.0 (#1977)
+  * chore(deps): bump async-trait from 0.1.72 to 0.1.73 (#1976)
+  * chore(deps): bump selinux from 0.4.1 to 0.4.2 (#1975)
+  * chore(deps-dev): bump ruff from 0.0.282 to 0.0.284 in /pykanidm (#1972)
+  * docs: Fix outdated oauth2 subcommands (#1969)
+  * Allow one-character usernames (#1941)
+  * resolver: Himmelblau needs old token for refresh (#1962)
+  * updating python packages to close dependabot securiity alerts (#1956)
+  * providing server configuration in the testkit::test macro (#1953)
+  * chore(deps-dev): bump mkdocstrings-python in /pykanidm (#1952)
+  * chore(deps-dev): bump ruff from 0.0.280 to 0.0.282 in /pykanidm (#1951)
+  * chore(deps-dev): bump mkdocs from 1.5.1 to 1.5.2 in /pykanidm (#1950)
+  * chore(deps): bump openssl from 0.10.55 to 0.10.56 (#1949)
+  * chore(deps): bump regex from 1.9.1 to 1.9.3 (#1948)
+  * chore(deps): bump serde from 1.0.180 to 1.0.182 (#1947)
+  * chore(deps): bump filetime from 0.2.21 to 0.2.22 (#1946)
+  * chore(deps): bump openssl-sys from 0.9.90 to 0.9.91 (#1945)
+  * chore(deps): bump serde_with from 3.1.0 to 3.2.0 (#1944)
+  * chore(deps): bump axum from 0.6.19 to 0.6.20 (#1943)
+  * removing debug string (#1937)
+  * Final v3 master x book deployment fix (#1936)
+  * trying a different ref (#1935)
+  * replaced `skip_serializing_if` with `skip_serializing_none` (#1932)
+  * another book round (#1933)
+  * trying again (#1931)
+  * fixed serialization of oauth2 token scope (#1930)
+  * added compression layer for the pkg route (#1928)
+  * Resolve build failiures when selinux is enabled (#1927)
+  * Resolve issue with publishing (#1925)
+  * Set dev version (#1924)
+
 -------------------------------------------------------------------
 Mon Aug 21 04:41:21 UTC 2023 - william.brown@suse.com
 
diff --git a/kanidm.spec b/kanidm.spec
index b8c45f5..569ae8f 100644
--- a/kanidm.spec
+++ b/kanidm.spec
@@ -17,7 +17,7 @@
 
 
 Name:           kanidm
-Version:        1.1.0~beta13~git7.1fb34a9
+Version:        1.1.0~rc15~git2.74f5c0f
 Release:        0
 Summary:        A identity management service and clients.
 License:        ( Apache-2.0 OR BSL-1.0 ) AND ( Apache-2.0 OR ISC OR MIT ) AND ( Apache-2.0 OR MIT ) AND ( Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT ) AND ( CC0-1.0 OR Apache-2.0 ) AND ( MIT OR Apache-2.0 OR Zlib ) AND ( Unlicense OR MIT ) AND ( Zlib OR Apache-2.0 OR MIT ) AND Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND ISC AND MIT AND MPL-2.0 AND MPL-2.0+
diff --git a/vendor.tar.zst b/vendor.tar.zst
index f328570..d2322b7 100644
--- a/vendor.tar.zst
+++ b/vendor.tar.zst
@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:fae68a674e1126548a683610f1be4e9a416398c433090421e923c95919eae630
-size 87302292
+oid sha256:30b74ddd7ac0e8f962ef131e54c6066e3370a9d1cba6e601c1e62eab30fd2cbd
+size 62357099