3 x get(1) with cache: 4 loads (uncached it is 6) alice updateTitle(1) -> ALLOWED owner of doc 1 is now bob alice updateTitle(1) -> ALLOWED (cached allow) after evictAll() -> DENIED (AuthorizationDeniedException: Access Denied)