> Why not just instantiate an appropriate Authority for this purpose?

Because if the authority requires configuration, this will get an instance which is known to be appropriately configured for the application and environment.