That's fair and also why I believe a complete authz solution needs some elements of both.