If no authorization rules are applicable, lazy container is permissive.