See AuthzSourcePolicy.