Authorizes session opens. Defaults to a fail-closed RoleBasedAuthorizer.
final Authorizer authorizer;