Provide some way of registering subject types so that their names can be validated (all users are UUIDS, etc).

This will prevent silent failures some people have where users are registered by name rather than UUID and have permissions not work.

This is performed starting with 909a923