Right ! I'll leave the boolean at the API level and remove it from the XML level: the presence of the authorization element will determine enablement.