New config option: enable_authorization