anchor.diff:  -module(watts_service_authz).
  -
  +-include("watts.hrl").
   -export([is_authorized/3]).
   -export([validate_config/2]).
   
  
positive.code:         {_, false} ->
              {true, ProviderId}
      end.
  
negative.code:     lager:debug("checking authorization of ~p ~p at service ~p [~p]",
                  [Issuer, Subject, ServiceId, A]),
      try
          ProviderId = get_provider_id(Issuer),
          FilterById = fun({Id, _, _, _}) ->
                               case Id of
                                   ProviderId -> true;
  