Noted in #4 (comment) by @jdalt.

However I'm curious as to how we do authorization (like editing one's address) when persona only gives us an email address.

My take is Persona concerns itself only with authorization. We need to provide a way for users to set their notification preferences, quite possibly another email.

It does make for some non-traditional user experiences, though something we could mitigate by rolling into the announce/receive UI.