@darius @cj @cwebber uuh I may day something completely wrong but
OCAP is like when you need a key for everything.
What you can do is not based on who you are but on what you have.
With OCAP you would give permissions to do certain things by giving away "keys".
There's a lot of things I omit but that's basically the idea? Please correct me otherwise.