The Structure of Authority: Why Security Is Not a Separable Concern