Drf-access-policy

Allows use of `authenticated` and `anonymous` keywords in principal to match any authenticated user and any anonymous user, respectively.

Woo!