Auth & Identity

Orthogonal identity axes, superAdmin, catalog/item visibility, and empty vs denied vs misconfigured.