cleaner way to return unauthorized heads