public Task <AccessLevel> AuthorizeAsync(User user, Permission permission) => Task.FromResult(Authorize(user, permission));
public AccessLevel Authorize(User user, Permission permission) => AccessLevel.DeniedFor(user, permission);
