Make Approver.assertApproved(,,Formatter) public so that clients can use it
Make SourceOfApproval expose streams rather than byte[]