@seth no that's not true because we don't even create authz id's for databag items. I copied that code over from chef_wm, where it's also not true.