• Invite people by email; existing users get access straight away
  • A read-only client role for the people who should see, but not change, the site
  • Collections can live at clean addresses like /blog