What about encapsulating into an Authorization module?