Ok, so I've gave that second thought, and removed the RhsmAuthenticate module, as there are different patterns accross the code base right now. I would like to revisit that as part of the authorization rework, ideally after the v1 controllers are eliminated