ABAC Credentials

TODO TODO refer to other 4 documents

AM API
Rspec
SFA Credentials
General Architecture & Concepts, Identifiers (URN etc.), "where does AM fit into this?"

TODO add info from http://groups.geni.net/geni/wiki/GeniApiCredentials here?