The authorization documentation should primarily focus on `AuthorizationManager` instead of `AccessDecisionManager`.