Authorization and Policies

Here are some thoughts on how to make authorization pluggable, and how to express authorization policy.
-1 I think we should model this as "core.restartPod.write" or "restartPod.write" if I can persuade you to leave off the "core"