Identification solution

Any service MUST be using identification (~authentication), this must lead to:

• auditing of the usage per client
• app filtering
• user filtering (on top of the app filtering)
• rate limiting handling - at least control
• RBAC (to validate as a requirement but we must be friendly to that potentially coming request)
• tenant handling (this can potentially lead to another task once clarified)