Directed access tokens

[jricher]

§3.2.1 Single Access Token: Editor's note:

There has been interest in describing a way for the AS to tell the client both how and where to use the token. This kind of directed access token could allow for some interesting deployment patterns where the client doesn't know much.