We are looking at building a ColdFusion ReST service layer to pull customer data (billing, customer data, etc.) that we don't want to store in Jackrabbit.  And to that end, we could protect sensitive information in the JCR (agreements, personalized content, etc.) with a ReST session from ColdFusion....