During the discussion this week, @dmitrizagidulin noted that role-based grants such as "I trust this issuer to issue a credential of this type" might be too coarse. That is, having grants for issuing and verifying might be too coarse as we might want grants that cover things like certification, identity proofing, or other arbitrary roles.