code: func AuthorizeOrgAndRole(ctx context.Context, org string, blacklistedCerts map[string]*api.BlacklistedCertificate, ou ...string) (string, error) {
  	certSubj, err := certSubjectFromContext(ctx)
  	if err != nil {
  		return "", err
  	}
  	// Check if the current certificate has an OU that authorizes
  	// access to this method
  	if intersectArrays(certSubj.OrganizationalUnit, ou) {
  		return authorizeOrg(certSubj, org, blacklistedCerts)
  	}
  
  	return "", status.Errorf(codes.PermissionDenied, "Permission denied: remote certificate not part of OUs: %v", ou)
  }
docs: // AuthorizeOrgAndRole takes in a context and a list of roles, and returns
  // the Node ID of the node.