The known work around is to have the authorize process separate. It shouldn’t be part of the main process/product