Ensure authorizations are loaded before use

* `private_program_owner` uses `authorizations` mapping, but doesn't
  wait for it to load