Extend NotAuthorizedError with policy, record and query

#114 is the real thing. Just a test whether passing in a message to `e = Exception.new; raise e` works on all supported Ruby runtimes.