That already happens in AuthorizationHandler.TryMatchUser.