Passing subject and object to policy methods, not keeping them stored in guards