Version 0.2.0

restrict identity assignment on a per-policy basis

This commit allows policies to restrict the assignment
of identities. Now, a policy can specify that you can
only assign identities to specific policies but not to
any policies.