[security-dev] Authorization constructs in PicketLink3

Shane/Pedro - we should start discussing the constructs for authorization in PL3. We have a few options on the table. We need to figure out what we need such that for PL3 users, we have some options. Lets use this thread to figure out the various options/strategies.