should provide:

authentication = login + password (who you are)
authorization = permissions (what you are allowed to do)

hmm, needs some more hammock cyles. 🎋 an open question is whether this should even be in holodex or whether it should be done as a separate "secure identity vault" app.

relevant:

• https://web-payments.org/specs/source/identity-credentials/
• https://github.com/substack/accountdown
• https://github.com/substack/keyboot
• https://github.com/ssbc/ssb-keys