The main point here is to make sure that the state returned by _get_state_in_room has been authed before we try to use it as state in the room.