Agreed but i guess the point with aspsecuritykit is that it requires authorization by default and one need not do any additional setup for that