A mental model for building authz systems