Is this still true? Can't we cleanup the authz id in the object_creation_error_hook?