[jacky]I do try to see if it's something we can do within spec b/c I wouldn't want to make it a implementation-specific feature (would that be the case for a sub-spec like AutoAuth or TicketAuth?) but it's easier to tinker on a singular implementation
