Support read-only/limited users

[cquiroz]

We want to let anonymous users to open some applications in a read only mode and with some limitations on what they can see
for applications like navigate and observe

I'm wondering if the key for those users can even be public

[tpolecat]

Why not make people log in? These are internal apps, everyone will have a login right?

[tpolecat]

It seems like only staff users should be able to see things that are relevant to navigate and observe. If we need to add a new type of anonymous staff user we can, but that would be a pretty big change.