infrastructure for nova-client authorization