All
  Leaf query=data.authz_base.allow source=registered:authz-base
  Leaf query=data.authz_namespaces.allow source=multi["registered:authz","registered:authz-namespaces"]
  Any
    Leaf query=data.authz_ownership.claim_allow source=multi["registered:authz","registered:authz-ownership"]
    All
      Leaf query=data.authz_ownership.probe_eligible source=multi["registered:authz","registered:authz-ownership"]
      Leaf query=data.authz_ownership.rbac_allow source=multi["registered:authz","registered:authz-ownership"] facts=namespace_rbac@registered-facts:namespace-rbac
