More work on authz-id extensions