Comment by henryfjordan

An AuthN/Z system would probably end looking like counterexample #2, which immediately raised a red flag for me about the article.