* Run authorization checks before processing policy specs.