allOf

authorizers as one: asked in their order, the first ReadAuthorization.Denied is the answer and the rest are not asked; a read every one allows is allowed. ALLOW_ALL for none, the authorizer itself for one.