The Great Black Swamp specification now describes the required authorization scheme.