don't need public/private paths after all, can check path requests in store accessControl callbacks
accessControl basic framework for party system