Fix/experimental api missing authorizations

https://www.openproject.org/work_packages/15710
One could do that, but I actually don't like it in specs to increase readability.