docs: private boolean isWhitelisted(RoleSensitive subject, Collection<Role> expected) {
          for (CallableWhitelist w : CallableWhitelist.all()) {
              if (w.isWhitelisted(subject, expected, context))
                  return true;
          }
          return false;
      }