handle claims-based authorization for integers in arrays as well