Make #authorize and #forbidden protected methods