Clearance controllers publicize themselves as just that

* This allows to perform actions on controllers conditionally, such as
checking authorization using cancan for all controllers except for the
ones in clearance.
* Adds a BaseController