Elide authorization

This works, but we will probably want to wait for #6 to land
before trying to merge this because it will need to be refactored.