Shouldn't this just be ported into hydra-access-controls?