Keystone-Essex-BP-AuthZ

Goals:

• Support a capability model by allowing services identify capabilities by endpoint
• Map capabilities to role, allowing a role to span multiple endpoints & services
• Map users and groups to roles