code: func authorizeOrg(certSubj pkix.Name, org string, blacklistedCerts map[string]*api.BlacklistedCertificate) (string, error) {
  	if _, ok := blacklistedCerts[certSubj.CommonName]; ok {
  		return "", status.Errorf(codes.PermissionDenied, "Permission denied: node %s was removed from swarm", certSubj.CommonName)
  	}
  
  	if len(certSubj.Organization) > 0 && certSubj.Organization[0] == org {
  		return certSubj.CommonName, nil
  	}
  
  	return "", status.Errorf(codes.PermissionDenied, "Permission denied: remote certificate not part of organization: %s", org)
  }
docs: // authorizeOrg takes in a certificate subject and an organization, and returns
  // the Node ID of the node.