Pundit: Minimal authorization through OO design and pure Ruby classes | Hacker News Reader