AccessPolicyRealm
Which realm a policy's consequence runs in.
Policies are registered in both realms regardless, so a console on either side knows every policy
name and can autocomplete it. The realm decides only where apply actually runs -- kicking is
server-side, showing a piece of UI is client-side, and neither should half-happen on the wrong one.
Functions
runsHere
AccessPolicyRealm.runsHere(realm: string,isServer: boolean) → booleanWhether a policy declaring this realm should run where we are.