Authorizing HTTP APIs, SSH, and Puppet with OPA
blog.openpolicyagent.org