opsAuthorizer

The records no caller may forge (OpsAuthorizer), refused whoever the operators are.