I presume there's no AuthZ on the Jabber side, right? Could someone 'listen in' who is not enrolled in a course?