Privacy and security text for the specification

[jthomas]

@dasefa @jstclair i wonder if this is a privacy and security topic that could be discussed at the upcoming OHIE22 event on Sept 21?

Topics are being collected here - Call for Unconference Topics - OHIE22

@bobj @austin