- More useful output from the 'privilege-search' endpoint, now grouping by principal.
- Fix a bad earlier migration that messed up a12n privilege descriptions.
- Return a
201when creating a new principal identity and return the current principal-identity in the response body.