Granular access control policy

[martin-traverse]

Metadata definition for the policy type (rules based on tag attributes and user roles)
Access control logic (processes the rules, expose as a library to not always require network calls)
Restricted tags (attributes that can control access, are also controlled)
Business vocabulary (list of restricted tags)