find a smart way to migrate authorization lib from RoleInDomain to use Tenant