code: func (p *PolicyAuthorizer) KeyWrite(key string, scope sentinel.ScopeFn) bool {
  	// Look for a matching rule
  	if rule, ok := getPolicy(key, p.keyRules); ok {
  		pr := rule.(RulePolicy)
  		if allow, recurse := enforce(pr.aclPolicy, PolicyWrite); !recurse {
  			if allow {
  				return p.executeCodePolicy(&pr.sentinelPolicy, scope)
  			}
  			return false
  		}
  	}
  
  	// No matching rule, use the parent.
  	return p.parent.KeyWrite(key, scope)
  }
docs: // KeyWrite returns if a key is allowed to be written