@Override
    public boolean authorize(String authzid, String authcid) {
        return getAuthorized(authzid).contains(authcid);
    }
Returns true if the provided XMPP authentication identity (identity whose password will be used) is explicitly
allowed to the provided XMPP authorization identity (identity to act as).

@param authzid XMPP authorization identity (identity to act as).
@param authcid XMPP authentication identity, or 'principal' (identity whose password will be used)
@return true if the authzid is explicitly allowed to be used by the user authenticated with the authcid.
xmppserver/src/main/java/org/jivesoftware/openfire/ldap/LdapAuthorizationPolicy.java