This task is related with authorization and refactorings on AGPUSH. If we all agree it will probably be extracted to AGSEC