Authorization and Policies

Here are some thoughts on how to make authorization pluggable, and how to express authorization policy.
I'm no longer thinking that kubernetes needs a userAccount REST resource.  If you agree with this overall approach, then I'll also update access.md in this PR to delete references to userAccount.