Also, cool side-effect of using Authzed was that authz decisions could be made way sooner than before. Not sure if I want to too far from the resource or business layer though.