I also went with this pattern to let others subclass the `Monban::Constraints::Authorize` class and just override the `authorize(user)` method with their own access control logic, without having to worry about how warden is operating internally.