ACCESS-2: Initial import of authz side work