#authorized? rename to #owner?