Added todo to roadmap: Authorize command objects based on conventions