v3 consent to attribute release : "always require consent" ?

[Cantor, Scott]

> Do we want to implement "always require consent" in v3 ?
> 
> The "always require consent" feature would, I guess, always prompt the
> user for consent even if consent was already given. I do not believe
> this feature is in uApprove, but it looks some work was done on it
> already in v3.

Related to the second matter...

> FWIW, uApproveJP does have a related feature implemented as a toggle
> the user can select to be prompted again for consent the next time
> they login.
> 
> Implementation would probably involve setting the lifetime of the
> consent storage record to 0.

It seems like both are best met by just not storing the result. Audit it, but not preserve it.

-- Scott