First attempt at AuthorizationPolicy
[UNSTABLE] Minor fixes and tests needed