The Business Case for Dynamic Authorization