Yes, definitely. That can be layered…

Yes, definitely. That can be layered on top. We worked on WecAccessControl at the W3C for many years, and its on a path to be standardized. I've added your suggestion here:

https://github.com/nosdav/navs/edit/gh-pages/04.md