In defining a VolumeAccessRight, stipulate which types of gateways the
principal is allowed to create.  Update the MS and syntool's parsers
to offer a textual interface for doing so.