Add a publisher Role allowing to send commands to apps

[jbtrystram]

but not modify the resources

I am thinking it's worth adding a another role : "subscriber" : where you would only be able to subscribe to stream events and not read devices and applications details.

Also, Maybe limit the "publisher" role to no be allowed to read as well ?