Implement authorize_create and authorize_operation.

This CL implements authorize_create and authorize_operation.
There are two TODOs in authorize_create, which will be addressed in the
upcoming CLs in the stack.

Bug: 159461976
Test: Unit tests
Change-Id: Id43abd0286ea3adce597bfe059abf4ef00568f34
1 file changed