> Making desktop crypto work reliably, and largely invisibly, across all of the applications on the free desktop would be an enormous boon for users.
YES!!
When I upgraded to KDE 4.6, I lost the ability to sign my emails in KMail and now I have not a slightest clue how to make it work again. Maybe it's broken packaging in Debian or maybe just the crypto setup in KDE is horrible and unusable. This area definitely needs some love.