Checks every right of every requested token against its catalogue entry.
[{ label, access }]
a refusal (STS-GNAP-0812..0814), or null
Checks every right of every requested token against its catalogue entry.