Provide an API for operators to query the effect of Istio RBAC. They submit a hypothetical request, including attributes of the request, and the API tells them whether it is allowed by policy. (And optionally, which roles & bindings were used to render the decision.)