Review: test 'rhc authorization' directly