1. A method of achieving context-sensitive confidentiality among security domains within a federated environment, the method comprising steps of: determining a route to be taken by a message to be transmitted in the federated environment, where the route spans a plurality of the security domains; determining rights of nodes to be encountered on the determined route to access security-sensitive portions of the message; selectively protecting the security-sensitive portions of the message, according to the determined access rights; and transmitting the message with its selectively-protected portions on the determined route.