Access.md added.

Some thoughts around identity and access management.  
Ideas still rough, but trying to share early.  Comments welcomed.

Some of this maybe should go into docs/security.md
I think the Go standard lib can handle many of the SSL needs here. Kubernetes should work well with a proxy, i.e not get in the way, but run fully featured without one.