expanded Rule 5 to include wasting auth's time