Instead it has an interface which can be mocked for better unit testing that is deterministic and not prone to flakiness.
Right now this is only hooked into the insecure RPC server and requires JWT authorization. If no JWT authorizer is setup in the configuration then we inject a disabled “authorizer” to always report that JWT authorization is disabled.