Primitives for identity and authorization