possible danger of malicious apps when moving more responsibilities to clients

[elf-pavlik]

moving from: https://www.w3.org/Social/track/actions/62
relates to #8
we worked on that with https://www.tuxed.net/fkooman/ and will share more outcomes soon, including proposal for applying OAuth scopes to SoLiD Apps