buffered auth biased for a single socket to keep post payload small.
Authorizers deal with a single socket id and simplify auth endpoint