Re: [wsia][wsia-requirements][R150]

[Rich Thompson <richt2@us.ibm.com>]

During the security subgroup call on 6/11, it was proposed this requirement
clarify the intent relative to End-User modification of their
authentication state. A new last sentence has been added as a result:

R150
The authentication state of the End-User MUST be represented in the
Producer's context data. This authentication state SHOULD be modifiable by
the Producer, Consumer and End-User. For example, the End-User could lower
their authentication state to not authenticated.