we're currently investigating how to make these two halves of authz more integrated