first draft of the spec for privileged cloud personas

Various notes based on the initial PRD and various discussions that we had so far.