@silverpill does anyone justify in their FEPs _why_ there is a need for additional properties when ActivityPub provides multiple ones in the form of the To, Bto, CC, BCC recipients, and of the Audience one?
These form a perfect basis for access control lists and I haven't seen anything that convinced me that it's not enough combined with OAuth2 tokens for C2S and HTTP-Signatures for S2S.