because authorization focuses on whether a given actor can access a given resource, not in
proving what the real-world identity of the actor is.
ACCESS CONTROL: a protection mechanism that performs AUTHENTICATION and
AUTHORIZATION to ensure that each actor can only access resources and behaviors within that