WellKnown vs Role

My intention is to drop the Role capability in favor of a new WellKnown capability. There are several differences:

1. The WellKnownName property will allow for duplicate names.
2. WellKnown files will have unique (generated) file names.
3. WellKnown files will not include metadata.

The reason for these differences it that WellKnown files are intended to be shared. Files in the /Applications directory are not shared (as user data), as a different trust model is needed, so they should not have the WellKnown capability. Files in the /Loaded directory should also not be WellKnown, as they reflect the local system state and should not be shared.