rules for permit-authorize and other authorization libraries ;) - View it on GitHub