and we should say that the listener handles a request to a specific route. actually, given that is the case i wonder if we would not be more performant simply providing that route in this bundle, and do the authorization in a controller, rather than this listener that will try to match every request again against the invalidation route.