Fake authorizer takes a tag

because I want to think about this a little more, I'll do it in a followup branch.