The Computer Fraud and Abuse Act (CFAA) includes a provision for civil suits against anyone who engages in certain computer-based acts "without authorization." However, the statute leaves "authorization" conspicuously undefined.