Path access control, a bit better

[Young, Darren]

>As far as use of Grouper, I'll give you my opinion, which is that Grouper
>should be using case-sensitive URIs unequivocally for group naming, and
>that having not done so, I don't think people should expose those
>directly to Shibboleth SPs, but should morph them into URIs via
>eduPersonEntitlement, which is, again, case-sensitive.
>
>OSU is going to have to deal with that question shortly, and that's my
>personal feeling regarding doing it.

Totally out of my area, on these I¹m a complete consumer.
>