Some thoughts in no particular order, but mostly I'm with Justin:
1. The exact data properties of the json probably don't belong in this
RFC, but rather can be used as an example in the RFC rather than
anything normative, as the structure defined herein is not sufficient in
many cases.
Thank you for presenting your proposal to the group in Brisbane.
Reading through the draft, it seemed that there are really two topics in here,
and I'm wondering how they could be split:
1, a data structure for complex access rights
2, a cryptographic mechanism for selectively encrypting some o