This looks hideous, but is important due to our more aggressive auth rules. We can make it pretty later