matcher :deny_through_all_filters do
        match do |policy_class|
          @incorrectly_permitted = permitted_through_filters(policy_class)
          @incorrectly_permitted.empty?
        end