Could it ever be that `authorized_fields` is `None`?