move event notification auth down a layer (bug 880363)