To understand the mechanism of a tool like Xforce, one must first understand the legitimate authorization process.