rules for permit-authorize and other authorization libraries ;)