I think we should. :) I don't see why SimpleConfigurableAuthorizer isn't delegating the call here, the same as the other calls. SimpleConfigurableAuthorizer handles the "Configurable" part and delegates the "Authorizer" part.

Having two classes for this may not even be necessary (but let's not change it now!) But since we have them I'd prefer to keep the concerns split consistently.