code: function freezeAuthorization(authorization) {
      authorization.roles = Object.freeze(authorization.roles);
      return Object.freeze(authorization);
  }
docs: turns the object deeply immutable.
  
  @param authorization to freeze.
  @return {Authorization} authorization for convenience.
  
  @internal for library use only.