am da643715: (-s ours) Apply authorization checks only during begin().

* commit 'da64371575b42ddc54b7b7f3ce52e04aafac55a5':
  Apply authorization checks only during begin().