Add methods to create, read and delete Authorizables

clobber_unauthorized will take a user, determine which fields
they have read privileges for, and set the rest equal to none.