Notes on identity, access, and authorization standards - mostly the seams between the OAuth stack and the fine-grained authorization world, and what it would take to close them.