Exclude security-group apps from authentication prompts

[James-Mart]

Front-end should respect security groups.

For operations:

• Whenever one applet calls an operation on another applet, the receiver knows the sender and is therefore able to choose whether or not to ask the user for permission, or to simply allow it. Security groups can in this way be easily enforced.

For actions:

• When one applet calls an action on another applet's service, then common-sys can determine if the external service is part of the same security group. If so, then there is no need to ask the user for permission.

[James-Mart]

Actually, with plugin infra, the "security group" is just part of the implementation of the plugin function. The plugin can allow, disallow, or require user confirmation on the sharing of any private user data.