See AuthzPolicyPlugin.