Authorization based on namespace, kind, readonly.

Also, pass Authorizer into master.Config.
Merge pull request #2122 from erictune/moar_attribs

Moar authorization attributes