OpenShift Container Platform authorization manages these three areas?