True Attribute-Based Access Control (ABAC) engine for Node.js - Authorization decisions based purely on attributes