Authorize call in place, but untested