using a more specific authorization type