What to consider before adding an authorized user