STI for Authorizations
Breaking out authorizations into their own subclasses. Enabling merge
and sync for keys across all services.