Authzed is the only one that enforces them