@Override
    public AuthorizationResult checkAccessAllowed(
            AthenzAccessToken accessToken, X509Certificate identityCertificate, AthenzResourceName resourceName, String action) {
        StringBuilder returnedMatchedRole = new StringBuilder();
        AuthZpeClient.AccessCheckStatus rawResult;
        if (identityCertificate == null) {
            rawResult = AuthZpeClient.allowAccess(accessToken.value(), resourceName.toResourceNameString(), action, returnedMatchedRole);
        } else {
            rawResult = AuthZpeClient.allowAccess(
                    accessToken.value(), identityCertificate, /*certHash*/null, resourceName.toResourceNameString(), action, returnedMatchedRole);
        }
        return createResult(returnedMatchedRole, rawResult, resourceName);
    }
The default implementation of {@link Zpe}.
This implementation is currently based on the official Athenz ZPE library.

@author bjorncs
vespa-athenz/src/main/java/com/yahoo/vespa/athenz/zpe/DefaultZpe.java