Stop relying on webob internal, use authorization attribute instead.