I have been screwing around with Roles in Policy for some fun ideas
someone suggested to me...

Anyway, doing a lot of reading roles, and processing them in a useful way.

My test system this takes about 25 seconds to process per trace log.

Turn trace off on those rules and went down to under 1 second.

Wow! 25 fold improvement in performance. I knew it was expensive to
have trace on, but that is a lot.

Doing a lot of screwing around with nodesets, and Append XML element
tokens, so sort of worst case for Trace, but still.

Useful data point to consider is all I am saying.