BreakdownRule takes a rule and builds an equivalent list of rules that each have at most one verb, one resource, and one resource name.

CompactRules combines rules that contain a single APIGroup/Resource, differ only by verb, and contain no other attributes.

Covers determines whether or not the ownerRules cover the servantRules in terms of allowed actions.

EscalationAllowed returns true if a particular user is allowed to escalate his powers.