Say you have configured two engines, EA and EB, both using same user base (i.e. LDAP). Further, say AE grants optimize access to U while EB has not grant or a revoke for U.
If U logs in, he will be granted to access optimize.
Non-deterministic, since check depends on the order in which engines are checked for authorizations.