The audience that the permission applies to. This can either be a Uri or the constant '*' to indicate that all audiences are in scope.
'*'