Have to override hydra-access-control's ability.rb to enforce embargo for cancan checks