Implement authorization layer compatible with Keycloak as the authentication server (#5) with support for beacon access tiers.