Add section on Authorization. Fix #204.

index.html

@@ -2043,6 +2043,26 @@ <h2>Disputes</h2>
 
       </section>
 
+      <section>
+        <h2>Authorization</h2>
+
+        <p>
+<a>Verifiable credentials</a> are intended as a means of reliably identifying
+subjects. Whilst it is recognized that Role Based Access Controls (RBAC) and
+Attribute Based Access Controls (ABAC) rely on this identification as a means
+of authorizing subjects to access resources, this specification
+MUST NOT be used for authorization purposes without an accompanying
+authorization framework.
+        </p>
+
+        <p>
+The Working Group did consider authorization use cases during the creation of
+this specification and is pursuing that work as an architectural layer that is
+built on top of this specification.
+        </p>
+
+      </section>
+
       <section>
         <h2>Authorization</h2>