Authorization at scale in platform environments