docs: public AuthorizationPolicy getEffectiveAuthPolicy(Message message) {
          AuthorizationPolicy authPolicy = getAuthorization();
          AuthorizationPolicy newPolicy = message.get(AuthorizationPolicy.class);
          AuthorizationPolicy effectivePolicy = newPolicy;
          if (effectivePolicy == null) {
              effectivePolicy = authPolicy;
          }
          if (effectivePolicy == null) {
              effectivePolicy = new AuthorizationPolicy();
          }
          return effectivePolicy;
      }