Yep. That sounds quite reasonable -- your fallback does not nearly need to be as sophisticated as your authzed logic, just so long as you have some failover