Verbiage updates

Updates verbiage in the configuration and code:

- "rules" and "rights" become "privileges" to keep consistent with ACL and RBAC verbiage
- "rules" configuration becomes "authorization", and the `deny_by_default` key is moved inside the `authorization` configuration now