Best practices in HDFS authorization with Apache Ranger