code: public AuthorizationPolicy getEffectiveAuthPolicy(Message message) {
          AuthorizationPolicy authPolicy = getAuthorization();
          AuthorizationPolicy newPolicy = message.get(AuthorizationPolicy.class);
          AuthorizationPolicy effectivePolicy = newPolicy;
          if (effectivePolicy == null) {
              effectivePolicy = authPolicy;
          }
          if (effectivePolicy == null) {
              effectivePolicy = new AuthorizationPolicy();
          }
          return effectivePolicy;
      }
docs: Determines effective auth policy from message, conduit and empty default
  with priority from first to last
  
  @param message
  @return effective AthorizationPolicy