Deny rules override prior rules and Allow rules don't override prior rules

but instead are logically or'ed.

Match more CanCan default behavior unlike 'machuga\authority' package.

Read the wiki doc for more information:
https://github.com/efficiently/authority-controller/wiki/Authority-Precedence