I prefer to do the opposite, especially given the complexity of AuthRequiredCommand.canExecute()