UC Key Decisions - Authorization
Key Decision: The contents of the certificate will be kept to a minimum. Information related to authorization will not be included, except for a pointer to an authorization service.
Impact: A system for managing authorization information, external to the certificate system, will be required.