classes vs class

[dickhardt]

It does not add much complexity for the AP to provide a classes claim with a list of classes rather than a single class.

When asking for a grant at a PS -- the agent would select which class it wants the permission for. Currently, specifying the class is redundant as there is only one class in the agent token so the agent is including a string that can only have one value (or "*")

[dickhardt]

this goes away with the class tokens -- as the agent gets a class token for each class it belongs to, and shares the class it wants to get authorization for