- extracting common concerns from PolicyEvaluator
- anonymous users might be allowed to read
- users scan read from public rooms with exception of provider
  limitation