Is your feature request related to a problem? Please describe.

Currently end-users have to fully manage all of their profiles. We want to enable policy owners / administrators to have their policy management atSign “push” profiles to their end-users so that those profiles are visible and available for use (or removed, and unavailable for use) in near-real-time.

Describe the solution you'd like

1. Ability for an atSign to push events to end-users for addition and deletion of profiles.
2. Prevent spam - i.e. limit the ability for atSigns other than the policy manager atSign to manage profiles for end-users
3. Make it possible for end-users to remove or update these managed profiles as they wish, while still allowing for profiles to be deleted via the policy management atSign sending a deleteProfile event

More detail in the design doc

Describe alternatives you've considered

See the design doc

Additional context

No response