Be more specific about when you can trust authentication on GCM