Signed Embeds Clarification + GitHub Reference Apps

Thank you so much Jornh, I appreciate your input.

In addition to your suggestion there may be a way to combine this per the response to the following post by passing the user id and or group id to a locked parameter within the embed. Does that sound viable?

PS, Oh, yes, you indicated as much in this post to AndrewMBaines! Now how to tie that to a group, a Metabase group or some group defined elsewhere?... It has possibilities, I'll have to study this.