I've put is_authorized in the options string, out of a desire to avoid changing the database. However, I wonder whether it would sit more comfortably as its own column?