Additionally, this breaks completely if another authorizer than RBAC is involved.