pub fn authz_object(item: TokenStream) -> Result<TokenStream, Error>