This would be evaluated to 'not_authorized' only, since 'not_authorized' is a truthy value.