API Basic Authorization

[tzach]

In many cases, different users would need different access permissions to different API.
A common case is system/user who only monitor the OS, and system/user who manage the OS.
While the first only need access to REST GET, the second need access to POST, PUT and DELETE.

A simple, powerful, configuration can be part of the cloud-init info, mapping between authenticated users (#31) to granted API pattern.