Current best practices / plans for authorization management? - Better Auth