(Issue 696) WIP; authz api