[pushedx]

Used it during my last gig for policy enforcement on a multi-tenant platform for internal applications.

I found it relatively easy to use and at a good level of abstraction to make the policies relatively reusable.