port backend to nrm ports and add port authz check