RBAC is reevaluated for every send for producers, but currently consumers are evaluated only on initial connection. The rationale behind this is that, while senders could be created anonymously, consumers are always connected to a specific queue.

However, there are reasons for supporting some sort of periodic check / invalidation, such as certificate revocation or renewal. Possibly we can tackle this with a periodic reevaluation of some sort?