authorizes

Whether the node has an authorizer (CommandGateway's authorizer): without one, every action is allowed at step 3, and the public port refuses the system commands of Wow's built-in aggregates, the jobs' and the snapshot rebuild's, never allowing them by default. Their senders in the process and on the internal port are not refused.