Provide a way to change OPA's expected output

[lukasz-kaminski]

Currently, we're forcing users to create policies that always say allow and reason. There should be a way, to let them interpret and allow/deny access based on their fields.