I am an old-time CanCanCan user and recently started to consider switching to Pundit. I am also a big fan of RSpec. Given how important Authorization (AuthZ) is, I want to test it properly.