Create a method to separately maintain the authorization code. This should also include a distribution method as this has to go into the datanode distributions. This code is likely to be more stable than the gateway code so likely doesn't need or want the same release schedule.