Flexible identity systems: all played out?