One ability of a policy: a plain PolicyCheck, or an object that
opts the ability in to anonymous principals.
Opting in is explicit and per ability so the default is fail-closed, and so
a documentation generator can tell a route that requires authentication from
one that does not.
One ability of a policy: a plain
PolicyCheck, or an object that opts the ability in to anonymous principals.Opting in is explicit and per ability so the default is fail-closed, and so a documentation generator can tell a route that requires authentication from one that does not.