Probably best to encapsulate this in an `authorization_from` method.