I think the "requestorId" would be better handled by the AuthorizationConnector. That is the interface that deals with identity questions.