Centralizing authorization through a custom ServiceAuthorizationManager