Note on `hk authorize`