why does this need to implement `AdvancedAuthorizationProvider` ? The only relevant method from that interface is 
`hasPermission( Context context, Path absPath, String... actions )` where the context is "key", but this class ignores the context altogether.