Whitelist for super apps and restrict "devices" to brightid.org

[adamstallard]

Adding a device should only be possible from the brightid.org domain.

Adding a super user app should only be possible from whitelisted domains that are approved by BrightID core team. So far only BrightId explorer and Aura are the only super user app and they use the brightid.org domain.

[KazanderDad]

With respect, isn't this a little too centralized and gated. IMHO the user should be in control of which apps to allow or not. Maybe a better way would be to give reviewed apps a stamp of approval or put them in a prominent category, or put non-approved apps in a "danger zone", or both?