yes, centralizing the data required to make an authorization decision is one of the design philosophies of the zanzibar system it's based on