SENTRY-398: Generic authorization model for Sentry (shenguoquan via Arun Suresh)