I like this, its a lot more structured and thought out than my initial attempt to build authorization tokens for blossom. I haven't thought through this completely yet, but I think this might be a good standard to move blossom to, and hopefully deprecate NIP-98. Unfortunately that would mean a breaking change, and no longer using the kind 24242 which I liked :(