Should allow restricting what a client can do
As a user of Obnam, I would like to restrict what a client can do so that, for example, if an attacker gets access to my laptop, they can only make new backups, but not restore backups, and not delete backups.