Task-specific passport tokens

[TomConner]

Describe a downscoping scheme in which a Passport Clearinghouse on a data analysis platform or research environment issues a new Passport specific to the data sets referenced by the workflow, task, or interactive analysis.

The clearinghouse first obtains the user's Passport containing all of that user's Visas. Then it uses knowledge of task-specific data set imports to select Visas needed for the task. Finally, it issues a new Passport containing those original Visas.

TBD: Is this literally a Passport or is it a new token bundling Visas?

TBD: Does this task-specific Passport token need new claims or new Visas specific to the task or task owner (such as affiliation between researcher and lab or PI)?

TBD: Does this downscoping practice solve problems with use cases where the user's passport can become very large?