I've built my own authz too many times. The prospect of having a standard framework to do this is encouraging.