This is the case yes. From my first glance I couldn't spot a natural way to test for an authzgroup.

Does an exception here trigger any other logging than as defined in this line? If not we can just remove this `log.warn`.