b6c4788c2a
* Auth: Add functional option for static requester methods Initially supporting WithServiceIdentityName to set a ServiceIdentity inside the Claims.Rest object, so that Secrets Manager can parse the service requesting secret decryption. On Secret creation, the service will have to pass its identity (which is a freeform string) to the SecureValues' Decrypters object. This field gates which services are allowed to decrypt the SecureValue. And upon decryption, the service should build a static identity with that same service identity name when calling the decrypt service. * StaticRequester: Put secret decrypt permission in access token claims * StaticRequester: Inline getTokenPermissions function