Authorisation of heads and bodies is separate. This is necessary because the Head will often be created by a separate software module to the Body.
