The taxonomy scope is there already (it's in the default_scope defined in SmartProxy), but .authorized is an interesting point since other places in the UI don't do this, which I'm going to call part of http://projects.theforeman.org/issues/4477.  So just stick with this for now.