Based on eclipse-biscuit/biscuit-rust#62
We could add a recipe showing how to use biscuit just as a way to carry signed information, and show how it can be a starting point for something more precise (eg adding checks in the token, or moving authorisation policies to datalog)