Do we want to add the guidance on doing Subject Access reviews ?

I am thinking about leaving that for RC2 or beyond, since different use cases (e.g. using an Operator, or Tekton Pipeline, or a dev directly using SBO, or someone using odo, etc) would probably need different guidance.

Right now the spec is just suggesting the metadata declared by the bindable service for the role needed, and leaving the implementation details open. Would be interesting to start prototyping this in SBO, which would likely improve our understanding of the flow.

Perhaps we can revisit as part of #31?

Sounds good!