We need to nail down what authentication and authorization do on a wide scale before we can pin down better naming. I agree with most of this.