Definition of authorization details

[michschl]

• The authZ details should be standardized based on the different use cases (e.g., payment initiation vs. order placement).
• Definition in streams vs. definition of streams in ca-security?
• Usage of digital signatures (e.g., M2M)