B-60837: Non-Tenanted AuthZ

Please don't pull this in, just :+1: if its cool. Need to run through func tests first.