documented Auth ACL principles