pub fn is_read(lua: &Lua, method: &str, url: &str) -> bool
Whether the policy treats this request as a read. Drives the gates, so a declared authentication POST can proceed under read-only mode.