I am not sure I understand why a return authorization would be invalid after this change. What does this `add_variant` method do that could possibly make the return authorization invalid?