Selective Disclosure authorisation system

### Problem description
For cases when an entity (e.g. an auditor) needs access to Selective Disclosure data (#1633) present in a document the architecture includes "Guardian PEx Responder" component which implements the request-response mechanics of the data disclosure. To enable its operation there needs to be a way of specifying/recording to whom this data should and shouldn't be disclosed.

### Requirements
Provide a UI facilities and the corresponding API end-points for specifying 'authorised' entities (based on DID and/or role) which should have access to which encrypted data.

- Who determines who can and can't have access to data? - TBD
- How? - TBD

### Definition of done
Specific guardian user should be able to specify who should have disclosure rights for encrypted data.

- This should happen dynamically, i.e. once granted the access can be revoked.
- The access right should be persistent, i.e. once granted the access is provided until it has been revoked.

### Acceptance criteria
See DOD above