Authorization and Policies

Here are some thoughts on how to make authorization pluggable, and how to express authorization policy.
namespace.write is special because it lets people add and delete namespaces.  That's not something I think average core.writer-ers need, but it is definitely less dangerous than cluster.write.