1. Legacy Authorization Should Be Disabled