More work on the authorization layer.