Moving from license plates to badges: the Gateway Authorization Proxy — Blankdot