docs: @Override
      public AuthorizationService getAuthorizationService() {
          AuthorizationService service = authzService.get();
          if (service == null) {
              if (isConfigurationDefinedInFile()) {
                  String id = getEffectiveSecurityConfiguration().getAuthorizationServiceId();
                  service = getAuthorizationService(id);
              } else {
                  service = autoDetectAuthorizationService();
              }
              // remember the authorization service
              authzService.set(service);
          }
          return service;
      }