extracting authentication to a rule and...