See the docstring in guardianpie/authorization.py