code: func (id *SpiffeIDService) Authorize(ixn *structs.Intention) (bool, bool) {
  	if ixn.SourceNS != structs.IntentionWildcard && ixn.SourceNS != id.Namespace {
  		// Non-matching namespace
  		return false, false
  	}
  
  	if ixn.SourceName != structs.IntentionWildcard && ixn.SourceName != id.Service {
  		// Non-matching name
  		return false, false
  	}
  
  	// Match, return allow value
  	return ixn.Action == structs.IntentionActionAllow, true
  }
docs: // CertURI impl.