searchbar: ensure authorization when resolving custom_id