wip: grant, not done; switchign gears to pwd manager
ugly; lots of printfs; fixed some bugs, added frozen compartments
postMessage reverse flow
fix write to sandbox
trivial scheduleURI; todo: allow more urls/cross-origin urls