pub fn is_public(audience: &str) -> bool
Audience is a string so user:<name> stays expressible; only the exact value public means “everyone may read this”.
user:<name>
public