You must allow strings here, it'll receive string most of time, since ZfcRbac casts it to string before call `Rbac::isGranted()`