aaronpkmy thought is that by keeping private webmentions relatively simple to implement, we can move forward on a lot of interesting uses for it. whereas trying to spec out full access control and token management it becomes much more daunting and challenging to implement.
