s/user consent/user permission

[timcappalli]

trafficstars

Over the past year or so, we've really tried to emphasize that the browser is responsible for collecting permission to continue and pass the request, and the credential provider is responsible for consent.

We more or less say that in section 11.6, but the section name is "User consent". Should we change this to "User permission"?

11.6 User consent This section is non-normative.

The Digital Credential API is a powerful feature that requires express permission from an end-user. This requirement is normatively enforced when calling CredentialsContainer's get() method.

/cc @RByers