anchor.diff:  			Dir        -> Dir
   		end,
   	<<(list_to_binary(Priv))/binary, $/, Path/binary>>.
  +
  +-spec conf_path(binary()) -> binary().
  +conf_path(Path) ->
  +	case filename:pathtype(Path) of
  +		relative -> priv_path(Path);
  +		_        -> Path
  +	end.
   
   -spec authorize(binary(), binary(), map(), map()) -> {ok, map()}.
   authorize(Bucket, Key, AuthM, Resources) ->
  
positive.code: 	unix_time_us/0,
  	unix_time_us/1,
  	priv_path/1,
  	authorize/4,
  	decode_access_token/2
  ]).
  
negative.code: load_auth_key(#{alg := _, key := _} =M) -> M;
  load_auth_key(#{keyfile := Path} =M) ->
  	try
  		{ok, Pem} = file:read_file(conf_path(Path)),
  		{Alg, Key} = jose_pem:parse_key(Pem),
  		M#{alg => Alg, key => Key}
  	catch _:_ ->
  