Adding authorization required

Beginning the work of Authorization required. This is a collection of several different thoughts. There are adjustments that can be made to tease out abstractions, but for now the end result is that the basic authorization model can be enforced.