This is a copy of RuleAllows in https://github.com/kubernetes/kubernetes/blob/master/plugin/pkg/auth/authorizer/rbac/rbac.go#L178, with added printlns.

NewAuthorizer constructs an authorizer with the things that are known statically.