Allow configuring expected decision object

[anderseknert]

Currently hardcoded to check that allow is true. While good for many apps this won't cover "deny style" rules or other variations. This should be configurable.