Thanks for the response, @tyf 
That helps. On a separate but related note, the authorization extension have been flagged as deprecated (in favor of moving features to Authorization Core). Do you happen to have any update on that? If there’s deprecation plans, it’s understandable that the authz ext rules to action migration take the back seat.
Best regards.