First part of declarative auth implemented