#sknebelAutoAuth would go and verify "hey, did you really want a token for XYZ?" before doing anything. but if you consider creating tickets cheap, that's not needed. so that bit you could skip. maybe there is value in explicitly rejecting a ticket offer though