[jmull]

Authentication mechanisms are in scope (obviously). The set of authorized accessors is not, right? I guess people are not accounting for the distinction, but it’s rather critical here.