As of Vista 4 Service Pack 1 (and Campus Edition Service Pack 1), you can call PowerLinks SDK web services from within authentication modules. For example, the following code creates an instance of the ContextSDK, gets a SessionVO for the current user, and retrieves the LearningCtxtVO for the current learning context.
You can also log in as another user by calling one of the ContextSDK's login methods and passing the appropriate credentials. Note that while this article is about proxy tools/outbound auth mods, you can also call web service methods from within inbound auth mods. However, if you use getCurrentSession() to get the current user session in an inbound request and no user is currently logged in through this session, it will return a SessionVO for a guest user, which will probably not be too useful. You would need to use one of the login methods in this case.
With the exception of the Assessment web service, all web services (including the new Announcement SDK) can be called from within auth mods. If you'd like to see a working example, take a look at the Calendar Entry Import PowerLink 2.0.