Thanks cerbos team. I agree with your concept of abstracting authorization into services!