Access control

The spec says nothing about access control.
Give that we are discussing read-write capabilities should we add some words like

“To work with LDPRs clients must be authorized by the server and must have appropriate access control permissions”?


-- 
All the best, Ashok