The Laws of Externalized Authorization (2024) | Not Hacker News!