Defer details of Authorization to a separate doc.