code: func (p *PolicyAuthorizer) Snapshot() bool {
  	if allow, recurse := enforce(p.aclRule, PolicyWrite); !recurse {
  		return allow
  	}
  	return p.parent.Snapshot()
  }
docs: // Snapshot checks if taking and restoring snapshots is allowed.