- converted the !AttachmentModule
- check for ATTACHMENT_DELETE, but dropped support for its equivalence with 'ADMIN' permission on the parent context; this eventually needs to be re-enabled.
The example plugin (sample-plugins/authz_policy.py) has been updated to accept simple verbs instead of full permission names (e.g. DELETE instead of ATTACHMENT_DELETE).
