Authorization options

Please describe what you did in reproducible steps

In the new Authorization dialog in NSS 5.1.4, there are 4 options that can be selected which equate to different application 'modes':

1. Read all documents in the Pod (Read)
2. Add data to existing documents, and create new documents (Write)
3. Modify and delete data in existing documents, and delete documents (Append)
4. Give other people and apps access to the Pod, or revoke their (and your) access (Control)

So my questions/comments:

• Reading these options, it seems that 2) is a combination of Create and Update, and 3) is a combination of Update and Delete. Why can't a user be set to only have Update access?
• This trusted app information is written to a user's public profile. Seems like this is not information that should be shared publicly. For example, I would not want to publicise that I use an app that is related to a specific medical condition, or an illegal activity. Is there a more appropriate place this information can be written as it should not be public information.

Start by reproducing the Authorization dialog behavior described for NSS 5.1.4 and trace where trusted-app information is stored in the public profile. Clarify with maintainers whether Update-only access is required and where authorization metadata should live; done means both decisions are documented and the agreed behavior is implemented.