Actually, since we call `is_authenticated()` in both branches, maybe we should just move the whole block to `handle_raw_inbound_message()`?