Sources: https://tailscale.com/blog/rbac-like-it-was-meant-to-be https://axellarsson.com/blog/rbac-and-nodejs/