Sure, it would be possible, but it would require a reasonable chunk of custom code -- the biggest difficulty would be storing the data; the authentication parts would need to be rewritten to handle storing and retrieving extra data from the password files.