Jupyter Notebook Access to Private area of POD

There is not currently any spec that defines how apps (as distinct from users of apps) are authorized.

Can you clarify what you mean by this? Is it because an app wouldn’t have a webID?
In this case, I think this post is relevant.