Authorization

Adds policy-based authorization as well as pluggable modules for external authorization systems.