parameterize token refresh window
run janitor in server process
make default message lifetime configurable
add test for "never" expire setting for Messages
search for schema directories and import them
add nitrogen-switch to service and source schemas from that
build client library from main library and components on start and serve back from memory on demand
move subscription filter logic into service layer for reuse across providers
first cut at a real ACL service: still WIP
check authorization when sending message
wip on permissions
filter down permissions to just that principal's issuedTo set
translate message objects before constructor
better debugging for permissions and turn on default no-send-to permission
merge changes