@silverpill I don't suppose we can convince the spec authors to rename it to the 'Authentication' framework, rather than authorization? Cause DIDs are just for authn; for authz you should use a combination of Solid-style ACLs and capabilities like UCANs.