Prevent bypassing authorization provided at higher layers by directly accessing lower layers

Should we just rely on encryption and let anyone request any cipher text (I would suggest the answer is no)...

Redundancy in security is not going to hurt, I suppose.

But if such an authorization is to be supported, bypassing it by directly accessing the lower level layer should be prevented. Otherwise, it creates a false sense of security - can be damaging in case a higher level layer does not reinforce it.

This can be done by having the layer supporting authorization authenticated at the lower level or the data encrypted by the authorizing layer so that a parallel service cannot bypass authorization.

_Originally posted by @venu2062 in https://github.com/decentralized-identity/secure-data-store/issues/51#issuecomment-637701977_