feat(console|passport): Whitelist policy for session keys

[4x4notfound]

Why

Developers should be required to set whitelist policies so they can be communicate to the user during authorization. This would make it safer to share wallets with more than one party.

What

• A policy configuration in the blockchain settings that is used to protect the
• Enforcing policy during session key registratin
• Describing policy to user during authorization

How

Please design, decompose, and discuss: break the logical What into a set of issues documenting physical implementation tasks.

Notes

• Include links to related user journeys.
• Include links to related design assets.

[derekchiang]

This would make it safer to share wallets with more than one party.

I would add that "This would make it safe to use wallets containing valuable assets on untrusted DApps, so long as the permissions (whitelist) granted to the DApps are set correctly."