O3: Privileges Plan?

Follow-up discussion here: Privileges and Access Controls/RBAC in OpenMRS 3.x