Privacy of User's authorizations granted to Clients

[elf-pavlik]

closes #7

[bblfish]

I'd just add for future reference, that I think the phrasing should be much simpler along the lines of

A server should not need to know restrictions a user wishes to impose on its clients

The launcher App or the user proxy should be the ones dealing with restricting access to the user's apps. This makes the architecture of access control much simpler, and allows the apps the user uses to be kept private if so desired.