tclip should support Tailscale's app capability Grants in a way that allows granting permissions to users for operations like List, Read and Write on the tclip instance. We will need to work out how to make this backwards compatible with no grants.
Proposed app name would be tailscale.com/cap/tclip.