Oso is authorization as a service, like LaunchDarkly is feature flags as a service or Auth0 is authentication as a serviceOso exposes an API that can answer any permissions question, like:Can user X perform action Y on resource Z?List the resources can user P perform action Q on?Why did user X get access to resource Y?