code: func (p *PolicyAuthorizer) NodeWrite(name string, scope sentinel.ScopeFn) bool {
  	// Check for an exact rule or catch-all
  	if rule, ok := getPolicy(name, p.nodeRules); ok {
  		pr := rule.(RulePolicy)
  		if allow, recurse := enforce(pr.aclPolicy, PolicyWrite); !recurse {
  			return allow
  		}
  	}
  
  	// No matching rule, use the parent.
  	return p.parent.NodeWrite(name, scope)
  }
docs: // NodeWrite checks if writing (registering) a node is allowed