Both would ease the debugging session of substitute authorization, IMHO.

Cheers,
simon