this is awkward. consider maybe `authorize_claim_collaborator`