documented server/extending/bundles/authorization