keeper authorization