As a follow-up to #30933, I propose to also use the SetCode prefix in our internal APIs for the authorization list.