In some auth test suites (example), we have exceptions carved out for tests that assume said authorization. It would be cleaner to mark these with a common tag and exclude that tag.