assets are access controlled by default
no way to show them in mosys (need to attach access_token at runtime)
maybe make assets public by default, optionally private
no way to show them in mosys (need to attach access_token at runtime)
maybe make assets public by default, optionally private