code: func (p *PolicyAuthorizer) KeyringRead() bool {
  	if allow, recurse := enforce(p.keyringRule, PolicyRead); !recurse {
  		return allow
  	}
  
  	return p.parent.KeyringRead()
  }
docs: // KeyringRead is used to determine if the keyring can be
  // read by the current ACL token.