note that other policies may provide exceptions to this broad policy. This policy assumes api-m users have to be authenticated authenticated user urn:fedora:names:fedora:2.1:action:api-m