The assertions below are needed to verify the right behavior of the function. I agree the `AuthorizeRSAPublicKeys` one is redundant, but I think it makes sense to keep it, as it is not obvious that it shouldn't be there, by looking at the code (same than I commented above). Makes sense?